MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » May 1999

Re:RE: strwtr auth user


  • Subject: Re:RE: strwtr auth user
  • From: Eric Sundell PMI <esundell@xxxxxxxxxxxxx>
  • Date: Thu, 27 May 1999 16:48:00 -0700

fixed


Our users had a nasty habit of starting the printers with their own outqs,
and
starting and stopping the writers, using other department's printers and
there
was a fear of sensitive data being looked at by the wrong people. we use the
group authorities and a menu system and have had very few problems.

my 2 cents

Eric Sundell
AS400/PC Specialist

____________________Reply Separator____________________
Subject:    RE: strwtr auth user
Author: "Evan Harris" [SMTP:spanner@ihug.co.nz]
Date:       5/27/99 1:03 PM

At 09:33 27/05/99 -0700, you wrote:
>>how can i grant individual users authority. to start their own print
>writers?
>
>To start a print writer a user need authority to the *OUTQ and the *DEVD.
>
>Try assigning *CHANGE authority to these 2 objects for the user or group
>profile.
>

Unless you *really* want to exclude everybody but the users entitled to
start the printer, this will take you on your first few steps to eternal
pain and suffering (i.e. hell)

If you want users to be able to start their own writers, consider granting
the necessary authority to *PUBLIC so that when you get the "Mary left so
now Fred needs to start the printer" you don't have to mess around with
private authorities, you just have to train them or grant them access to
the commands.

I generally make this stuff public and use use *PUBLIC *EXCLUDE for
outqueues I want to secure. This simplifies both the auditing of the
security and the maintenance of it.

Well, that's my opinion anyway !

Cheers
Evan Harris
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---






Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact