×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
Also USRCLS controls the options displayed on some UIM menus thus a
user with SPCAUT(*SECADM) and USRCLS(*USER) amy not even see some
options that would be visible to a user with USRCLS(*SECADM).
In this situation you can set up a (admittedly low) hurdle for a user
by making the profile LMTCPB(*YES), and USRCLS(*USER). Now because
they cannot see the UIM menu's for security and they do not have the
right to enter commands _at_an-OS/400_command_line, it is less obvious
(but not impossible) for the user to use their *SECADM abilities.
Conversely, you can take a user who has no Special Authorities and
make them a USRCLS(*SECOFR) and they will see all of the security
options on all of the IBM menu's, but they won't be allowed to
excercise manuy of them because they lack the requisite Special
Authorities.
Which just goes to show you (as I'm sure Simon already knows) that
USRCLS is next to worthless as a security control.
jte
On Mar 24, 2010, at 5:08 AM, Simon Coulter wrote:
--
John Earl
President and CEO
Patrick Townsend Security Solutions
"The Encryption Company"
Olympia, WA | www.patownsend.com
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
