Re: object authority problem -- SECURITY400

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

John wrote on 05/27/2004 03:27:13 AM:

> I given object authority *public = exclude for the object STRSQL. When a
> user signon to as/400, the ERP application is loading (initial program)
and
> the user is able to excute the cmd STRSQL. If he signoff and go to main
> menu, then it is not allowed. Can u tell me what is happening. The user
has
> no special authority

It sounds to me like the ERP application, or something it uses, has a
problem with adopted authority. That is, if the ERP application is
displaying a command line that allows the user to run the STRSQL command
then it sounds like the adopted authority is being propagated to the
command line.

To test this, I suggest that you ask the user to enter  DSPOBJAUT STRSQL
*CMD on that command line. If *ADOPTED is listed in the User column then
the authority to the STRSQL command is coming from adopted authority. If
*GROUP is displayed, then the authority is coming from one or more of their
group profiles.

Ed Fishel,
edfishel@xxxxxxxxxx

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.