RE: User profile creation

["Cotes, Steven" <cotess@xxxxxxxxxxx>]

Bruce,
you mean it the interest of looking out for us, functionality has
been restricted ?
I've tried the Operations Navigator and found it slow and cumbersome.
Finding out that I cannot use it for common tasks means I can't see
any reason to use it.

 - Steve Cotes

> ----------
> From:         bvining@vnet.ibm.com[SMTP:bvining@vnet.ibm.com]
> Sent:         Friday, May 01, 1998 5:54 AM
> To:   MIDRANGE-L@midrange.com
> Subject:      User profile creation
> 
> Gary,
> 
> From the security team:
> 
> Within Operations Navigator, there is a conscious attempt to direct
> users
> in a different direction than they may have used thru the traditional
> command interface.  While security used to advocate having the group
> profile own all objects for maintenance purposes, they are now leaning
> toward having the user keep ownership and give proper authorization to
> the group.  This change is due to the exposures of having all members
> of
> a group have ownership of all objects; and due to group profiles
> becoming
> full due to the number of owned objects.  They now advocate having an
> application owner user profile who's only purpose is to own the
> application programs and files, and who's authority can be adopted if
> needed from within the application.
> 
> Along the same lines, Operations Navigator also has set the group
> interface such that you cannot assign a password or any other
> information
> associated with signing on to the system.  You can only set the
> authority related information for the group (special authorities and
> members in the group).
> 
> Bruce
> 
> >
> >How can I change the owner parameter to *GRPPRF in CA Operations
> >Navigator when I create a user profile?  I just started adding new
> users
> >this way.
> >
> >Gary Feinstein
> >AS/400 System Administrator
> >Planet Hollywood International Inc.
> >
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---