Re: Change user profile without *SECADM

I created an application to re-enable disabled profiles. It runs under
adopted authority (as do all our programs), and it first validates that the
user profile belongs to an active (not terminated) employee. The Security
Office here has an application with which they maintain that cross-reference
file. The day after the termination date, a batch program runs that disables
any terminated employees for that day.

Only the help desk has access to the re-enable application (I can't even run
it; even though I wrote it), and they have to verify that the user on the
phone is who they say they are by verifying the last 4 digits of the SSN.

On Nov 9, 2007 9:27 AM, Al Barsa <barsa@xxxxxxxxxxxxxxxxxxx> wrote:

With all due respect, I don't this will work with QSECURITY set to the
default of 40.

Al

Al Barsa, Jr.
Barsa Consulting Group, LLC

400>390

"i" comes before "p", "x" and "z"
e gads

Our system's had more names than Elizabeth Taylor!

914-251-1234
914-251-9406 fax

http://www.barsaconsulting.com
http://www.taatool.com
http://www.as400connection.com




GUY_HENZA@denso-d
iam.com
Sent by: To
midrange-l-bounce Midrange Systems Technical
s@xxxxxxxxxxxx Discussion
<midrange-l@xxxxxxxxxxxx>
cc
11/09/2007 10:19
AM Subject
RE: Change user profile without
*SECADM
Please respond to
Midrange Systems
Technical
Discussion
<midrange-l@midra
nge.com>







SBMJOB CMD(CHGUSRPRF USRPRF(user_id) PASSWORD(new_password)
STATUS(*ENABLED)) USER(QSECOFR)

Regards,

Guy




"Chris Bipes"

<chris.bipes@cross-c To: "Midrange
Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
heck.com> cc:

Sent by: Subject: RE: Change user
profile without *SECADM
midrange-l-bounces@m

idrange.com



11/09/2007 10:10 AM

Please respond to

Midrange Systems

Technical Discussion







I have a command that calls a CLP to reset user profiles. This command
is secured by an Authorization List as well as the CLP. It allows non
security users named in the AUTL to re-enable a profile as well as
change the password. The password changes forces the flag to change
password at next sign on. I would also like to have it write to a log
but I have not gone that far. The owner of the command and CLP is
QSECOFR and it runs under owner adopted authority.

Chris Bipes
Director of Information Services
CrossCheck, Inc.


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tomasz Skorza
Sent: Friday, November 09, 2007 3:44 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Change user profile without *SECADM

Hi

Is it possible to change user profile (enable it) without secial
authoritie
*SECADM?

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.





--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.