Clarification of Security type S

I want to make sure I understand this correctly. THe following is the way I
understand how security access works from the greatest to the most
restrictive  based on Marc's and everyone else's information.

Security Type "S" means is the all powerfull category.  Any user with this
can get to all menus/products/programs.  In effect, they can do it all.

A user with Sec Type "U" and PROD ALL "1" can get to all Products/Programs
with the exception of a few SYS programs.

A user with Sec Type "U" and Prod All "0" can only get to applications if
they are "1" for that application or to specific programs if they are "1".
I know that you can give a user access to a product/application and then
explicitly exclude a program by making the users authority to that program a
"0".  And vice versa.


So.... When I find a user with Sec type "S" and Prod All "1" that would be
redundant. 

Why would someone set up a user with Sec Type "S", Prod ALL "0", Exclude
them from an application ACP "0" and explicitly exclude them from 4 programs
ACP9xx "0" and then give them INV "1" and INV300 "1".  Looks to me like
someone wasn't paying attention or doesn't understand how the security
works.

how does Transaction Effect figure into all this?

I apologize for the trouble, but I haven't gotten a straight answer from my
programming department and my RPG skills are non-existent.

Thanks
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---