Re: Working through issues with security

I don't think you would want to run any Java programs with adopt authority.
That seems like it would be more of a security issue than just giving the
proper authority to the user you are using.

I do think that some kind of authority adoption already happens with Java on
the i. I have not looked into this, but I know there have been times when I
run a Java class from the command line and it ends in error, I no longer
have authority to commands. This is probably documented, I just haven't had
a need to look into it at this point.

If you are updating some work files then populating the production files
with an RPG program, this might work. Try creating a CL that submits the
call to another CL that adopts authority to batch? I'm not sure that would
work as expected, but it's worth a shot.

James R. Perkins


On Tue, Feb 24, 2009 at 07:24, Smith, Mike <Mike_Smith@xxxxxxxxxxxxxxxx>wrote:

I have a java program that runs on a windows server. This program reads
data from microsoft Access and updates files on the 400. I have had
this working for sometime, but as part of locking down data, I now have
issues. Currently the data is going to a library that is secured, with
authorization given to a few users via Auth List. My boss wants to lock
it down further so that the profile I use will no longer have access to
this library.
So I thought we could have a driver program in another lib that adopts
QSECOFR and then uploads the file. This doesn't seem to work If I use
the secured lib in my connection profile(java). It doesn't pick up the
adoption(this makes sense to me) So then I thought I could crtdupobj of
the files in QTEMP. However the java program doesn't use the same
QTEMP.

Is there anyway I can use adoption or swap profiles via my java program?


Any other ideas on how to get around this.

Thanks

Mike
--
This is the Java Programming on and around the iSeries / AS400 (JAVA400-L)
mailing list
To post a message email: JAVA400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/java400-l
or email: JAVA400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/java400-l.