|
John, >>>You must have *AllObj and *SecAdm to register an exit pgm. >>>Should not the exit pgm itself have to be owned by a profile with >>>*AllObj/*SecAdm ? >> >> That sounds like a good idea. > >Not really. It's possible that I may want to use an exit program that >would adopt it's owner's authority, but not necessarily *ALLOBJ >authority. The restriction of requiring *ALLOBJ and *SECADM to >register the exit program is sufficient, requiring the exit program to >be owned by an *ALLOBJ profile would be onerous. It looks to me like we both were reading between the lines, but we read different things. You read "... owned by a profile with *AllObj/*SecAdm" as talking about adopted authority while I did not. I read that to mean that only the person who created and registered the exit program should be able to change it. Considering your interpretation I agree with your response. I think we both agree that the exit program should be give public *USE authority, and if it needs to adopt its owners authority for any reason, then it should be owned by a user profile with the minimum authority necessary to do the job. Ed Fishel, edfishel@US.IBM.COM +--- | This is the Midrange System Mailing List! | To submit a new message, send your mail to MIDRANGE-L@midrange.com. | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com. | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com. | Questions should be directed to the list owner/operator: david@midrange.com +---
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.