RE: Making command parameters off-limits

The idea of purchasing any other software is NO option. 
Sorry, not my idea, but I play by the golden rule. He who has the gold (my 
paycheck) sets the rules.
as far as Auditing and Information security is concerned, well lets just say 
that because we are a thrift, they also follow the golden rule.
Thanks for the reply.

>>> Jim Damato <jdamato@dollargeneral.com> 06/18/01 07:30PM >>>
Do you back up your spooled files?  If your Auditing and Information
Security folks (sounds like a fun-loving group) are concerned about users
trashing operators' spooled files, how do they feel about losing all spooled
files in the event of a system failure?

This doesn't seem like the answer you're looking for, but I've been using
Broderick's Spool Organizer for years.  When set up properly it can provide
you with online or tape copies of your critical spooled files.  Everything
is saved in UDB/400 files, which can be a part of a real backup.  Users can
be set up with access to spooled files within the system for reprints on
online viewing and can be secured from change or deletion of critical
reports.  And you can set up clean, meaningful rolling purges of online
spooled data.

I imagine there are competitive products, and some of this can be
accomplished with TAATOOLS and some creative programming.

I brought in Broderick years ago when I was trying to deal with the issues
you're attempting to resolve now.  No one wanted to admit that spooled files
are critical data, but they are on most systems.  Once you admit that  some
online reports are critical you have to face issues that go beyond
accidental deletion.

-Jim

James Damato
Manager - Technical Administration
Dollar General Corporation
<mailto:jdamato@dollargeneral.com>


-----Original Message-----
From: alan shore [mailto:SHOREA@dime.com] 
Sent: Monday, June 18, 2001 2:32 PM
To: MIDRANGE-L@midrange.com 
Subject: Making command parameters off-limits


Okay boys and girls, hopefully someone can give me an answer, or point me in
the right direction.
Here's the story, ---  Are you sitting comfortably? Them I'll begin.
Operations runs our nightly job flow. The reports are printed and then given
to the user. Occasionally not all the reports end up in the users hands, or
conversely, only portions of the reports are delivered. The user department
becomes exasperated, due to the procedure involved in locating the right
person (usually me - if I'm available) with the correct authority to hunt
down the reports in question for re-printing. The user has requested an
option/authority  to be able do this themselves. 
Auditing and Information Security have no problem with the principle, but
because operations of the AS/400 is outsourced, they do NOT want the user
having the capability of deleting any of operations spool files. 

I have devised a method for a menu option of viewing the operators
individual spools through WRKSPLF command. However this will give the user
the option of deleting spools. 
In order to rectify this I have come up with the following solution.
When this menu option is taken (user has NO command line capabilities) and
the correct operator is chosen (using the ability to adopt owner authority)
1/. Delete the library QTEMP
2/. Add the library QTEMP as the *FIRST library within the library list
3/. Copy the command DLTSPLF from QSYS to QTEMP
4/ Revoke the *EXECUTE authority for *PUBLIC to DLTSPLF within QTEMP.
This needs testing obviously, and I am hoping that this will result in an
exception message saying that the user has insufficient authority  yada
yada, and that the spool file cannot be deleted. 
5/. When the user chooses F3 or F12 to return to the menu, the object
DLTSPLF within QTEMP, type *CMD will be deleted, QTEMP removed, then added
at the *LAST position within the library list. 

The other "problem" command will be CHGSPLFA. 
3a/.  Copy the command CHGSPLFA from QSYS to QTEMP
3b/. Change command defaults (CHGCMDDFT) to the command CHGSPLFA within
QTEMP for the parameter SAVE to *YES.
 
This is where my problem comes in. Is there anyway of ensuring that this
parameter can then be made OFFLIMITS to the user, so that if option 2
(change) on the WRKSPLF screen is taken, the SAVE parameter will remain
untouchable at *YES. 


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com 
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com 
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---