× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  • Subject: Re: How to grant limited access to BPCS user? Query/400
  • From: DAsmussen@xxxxxxx
  • Date: Fri, 25 Feb 2000 00:33:12 EST

Khalid,

In a message dated 2/24/00 10:49:46 PM Eastern Standard Time, 
logic_km@hotmail.com writes:

> I want to give access of query/400 to my users. But I don't want them to 
see 
>  beyond their scope. For example sales department should not view GJD,GGM 
>  files etc.
>  
>  Since group profile of each user is SSA which is the owner of all BPCS 
>  objects including logical & physical files; hence it is not possible to 
>  restrict any user to see beyond its scope.
<<snip>>

This is a tough question.  AFAIK, SSA must still own everything in order for 
you to continue to receive support.  Hmmm.  This is going to require an awful 
lot of work on your part!  If I'm missing a simple solution, others feel free 
to comment (nicely).

First, create a library to place the mainline query objects in using 
CRTDUPOBJ (i.e., WRKQRY, RUNQRY) and duplicate them into it.  Add your new 
library into the system portion of the library list above QSYS.  The latter 
two steps will prevent your loss of these changes during your next OS/400 
upgrade.  Revoke all authority from these objects in the new library (*PUBLIC 
*EXCLUDE with no other specifc authorities).

Now, create new user profiles with group profiles (other than SSA) that 
represent what sets of files to which people have access under query and 
grant access to your new query objects to these group profiles.  Then create 
and assign authorization list entries to the files based upon the new query 
groups, ensuring that *PUBLIC is set to *EXCLUDE for the files.  Query users 
must sign on with their query profiles in order to query the files.

Tough work.  Perhaps someone else can come up with a simpler solution, but I 
don't think so...

HTH,

Dean Asmussen
Enterprise Systems Consulting, Inc.
Fuquay-Varina, NC  USA
E-mail:  DAsmussen@aol.com

"Everywhere is walking distance, if you have the time." -- Steven Wright
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---

As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.