Re: Adopted authority vs profile switching

At one time IBM decided that using adopted authority should not work in
certain situations, like creating certain group profiles, etc.  Perhaps
they thought this was a security enhancement.
Then they allowed a workaround with profile switching.

So then, does this not allowing adopted authority in these situations now
go into the realm of 'security by obscurity' and should they just open
these up to adopted authority?  Or do you see a value into making people
use these api's to do profile switching, - in this situation - ?

Now, I am not arguing that profile switching may not be useful in some
client serving or web based applications.  I am just arguing about it in
the first situations.