RE: chgobjown

>From the CHGPGM help:

Restrictions: <snip>

4.  Only the program owner, or a user with QSECOFR authority, can change the
user profile attribute (USRPRF).  Programs in library QSYS, QGDDM, and QTEMP
cannot be changed.            
5.  Before using this command, the user must have *SECADM and *ALLOBJ
authority.                                           

That excludes, on our system, everybody but a few people (and I'm not one of
them).

Francis Lapeyre
IS Dept. Programmer/Analyst
Stewart Enterprises, Inc.
Voice: (504) 729-1468 or (800) 257-1610, ext. 1468
FAX: (504) 729-1457
E-mail: flapeyre@xxxxxxxx 



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Vernon Hamberg
Sent: Thursday, October 13, 2005 9:56 PM
To: Midrange Systems Technical Discussion
Subject: RE: chgobjown

There are limits to the size of a user profile, including the list of
objects owned by it. These have gone up in recent releases, so there might
not be a problem. Still, I believe it is recommended that no single profile
owns everything on a system. And that it should not be QSECOFR, IIRC.
Consider this - if a program were owned by QSECOFR, any user with adequate
authority only has to change it to run as *OWNER and thereby gain all the
authority of QSECOFR.

There is a KB article on user profile size at

http://www-1.ibm.com/support/docview.wss?uid=nas137201406df087039862565c2007
d3436&rs=110