• Subject: Restricting User Access - Explaination
  • From: "Chris Ring"<cring@xxxxxxxxxx>
  • Date: Tue, 18 Nov 1997 09:07:28 -0500


Thanks for all the replys!

The reason that I want to do this is because we are developing a client
application that needs to signon to the AS/400 and check a user ID and
password (using API's) to see that the the user is a valid AS/400 user
before allowing the application to run.  The client application will first
call an RPG program on the AS/400 that accesses the Retrieve User
Information and Get Password Handle API's, the program needs to have
appropriate authority to access these API's.  We would like to ensure to
our customers that the user ID that runs this program cannot access any
objects on the AS/400 besides the check password program.  We create the
user profile using this command: CRTUSRPRF  USRPRF(SECUSER)
INLMNU(*SIGNOFF) LMTCPB(*YES) DSPSGNINF(*NO)  PWDEXPITV(*NOMAX)
ATNPGM(*NONE)

We must assume that any security level may be used by our customers.

Thanks again for your help.

Chris Ring
Senior Systems Analyst
Arksys Inc.
Little Rock, Arkansas


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---


This thread ...

Follow-Ups:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].