RE: Allowing CLRPFM with Limitied Capabilities

Actually, I think you only need *OBJMGT to do a CLRPFM.  *ALL will

allow

deleting the file but *CHANGE  + *OBJMGT won't.

This is true - *ALL authority to the file is more than is necessary to
do the job.  

jte


--
John Earl, VP and Chief Technology Officer
PowerTech:   253-872-7788
Direct:          253-479-1408
John.Earl@xxxxxxxxxxxxx
 

 
First Annual PowerTech Customer User Group - iNSIGHT '07 -- March 4-6,
2007 in Las Vegas, NV
iNSIGHT '07 is the only conference focused on System i security and
compliance issues.  
Learn more! www.powertech.com/insight.asp
 
===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.
 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of Gord Hutchinson
Sent: Monday, February 12, 2007 8:30 AM
To: Midrange Systems Technical Discussion
Subject: Re: Allowing CLRPFM with Limitied Capabilities

On Mon, 12 Feb 2007 09:56:37 -0500, rob@xxxxxxxxx wrote:

No, the limitation LMTCPB does not affect the ability to run that

command,

unless they are typing it themselves at the command line.

What limits them is that they cannot simply have *CHANGE authority to

the

file.  They have to have *ALL.  Not *ALLOBJ, just *ALL to the file.
Personally I think it is a stupid requirement.  I can easily run a

sql

statement
DELETE FROM MYFILE
which will delete every record, but I can't run any member command

like

CLRPFM.

Actually, I think you only need *OBJMGT to do a CLRPFM.  *ALL will

allow

deleting the file but *CHANGE  + *OBJMGT won't.


Gord


--
Gord Hutchinson
Database Administrator, IT
TST Overland Express
ghutchinson@xxxxxxxxxxxxxxx
905-212-6330
fax: 905-602-8895
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.