Re: Changing user profiles without *SECADM; adding *SECADM without ev enhaving *SECADM

Try the DSPPGM command and look at the User profile & Use adopted authority 
settings.









                                                                                
                      
                    "Burns, Bryan"                                              
                      
                    <burnsbm@echoincorpo        To:     midrange-l@midrange.com 
                      
                    rated.com>                  cc:                             
                      
                    Sent by:                    Subject:     Changing user 
profiles without *SECADM;  
                    owner-midrange-l@mid        adding *SECADM without ev en 
having *SECADM           
                    range.com                                                   
                      
                                                                                
                      
                                                                                
                      
                    01/26/01 10:32 AM                                           
                      
                    Please respond to                                           
                      
                    MIDRANGE-L                                                  
                      
                                                                                
                      
                                                                                
                      



We have a user profile with special authority *NONE that can do a CHGUSRPRF
and add *SECADM special authority to another profile.  This is done from a
command line on the initial menu.  This initial menu has three options:
EXECUTE OFFICE, EXECUTE MAPICS, and SIGN OFF.

How is this possible?  We are on V4R4 and at cume level CO252440.

The profile in question has USER CLASS *USER, GROUP PROFILE *NONE, OWNER
*USRPRFand LIMIT CAPABILITIES *PARTIAL.

I think this may be due to adopted authority, but I am not a programmer and
I have dug as far as I can into this.  Can someone shed some light on this?

Thanks in advance.

Bryan Burns
Echo, Inc.
Lake Zurich, IL
Burnsbm@echoincorporated.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---