Re: Limiting QSYSOPR access to own jobs -- MIDRANGE-L

Maybe the correct approach would be to separate the test/production
environments into separate partitions?

IBM i can host IBM i quite easily. You can set up the DEV partition to be
the size you need it to be and then you'll achieve your goal.

It's a matter of creating the partition definition.
Create virtual devices for disk hosting on primary partition
Create virtual disk units
Attach them
Create an Ethernet Bridge on primary
build new partition
Save/Restore the development libraries onto DEV
Done.

Complete separation. If your interested I can post the CL program to
create most of it.

Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects

On Tue, Oct 15, 2019 at 7:53 AM Erwin Donker via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

Hi,

On our (V7R3) system we have the production and development environments
on the same partition using different libraries. When there is an error in
a job that requires a reply, the message is sent to the QSYSOPR message
queue. When a developer is testing a change or reproducing a reported
incident, there will be messages in QSYSOPR from this test that the
developer has to be able to answer himself. Since our end-users don't have
a command line, giving *PUBLIC authority to answer messages in QSYSOPR gave
the developers the authorization they needed.

However, this also means they have access to answering production jobs and
other messages in QSYSOPR. I don't want them to have this access, so i am
looking for a way to revoke their access to QSYSOPR message queue, but at
the same time be able to answer any messages that appear in jobs they have
started themselves.

The only information I found so far is
https://www.ibm.com/support/pages/restricting-users-qsysopr-message-queue
but that also blocks their ability to answer their own jobs. Is there any
way to accomplish what I want? Or, alternatively, is there a way to have
certain messages go to another MSQG (for instance based on the user, jobq,
jobd, library, etc.)? The only thing I was able to find in this regard was
https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_71/rzahb/rzahbqueuesman.htm
.

Thanks in advance for your replies.

Kind regards,
Erwin Donker
De disclaimer van toepassing op e-mail van de gemeente Den Haag vindt u
op: http://www.denhaag.nl/disclaimer
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com