Re: Set up a profile Question

[Chuck Lewis <CLEWIS@xxxxxxxxxx>]

Ugggg...

There is NO WAY that Programmers and ESPECIALLY Operators should have *ALLOBJ !!

The problem with undoing this is they may or may not be able to do certain 
things
now. Programs could bomb, commands not work, etc.

It will be hard to undo, but REALLY something that should be done !

It SOUNDS like the IBM command authority MIGHT have been changed because
Operators had *ALLOBJ and could execute anything...

Not the best way to handle something like this, but might have been done at a
time when someone was new to the system and not fully aware of the best way to 
do
these things (hindsight is ALWAYS better than foresight... <BG>).

Chuck


Torres, Wanda wrote:

> > We are  going to be audited and   I am assigned to clean up.   Our
> > operators  and programmers user profiles have special authority *ALLOBJ.
> > I noticed that IBM commands in QSYS authority have been changed.
> >
> >       1) Is it common for shops to changed IBM command authority?  I
> > noticed why operators can't run some commands because of this.
> >
> > 2) When setting up a operator or programmer profile does anyone  use
> > QSYSOPR as a group profile for Operators  or QPGMR  as a group profile for
> >
> > Programmers?
> >
> > When I listed all  command authority  QSYSOPR & QPGMR  user profiles have
> > private authority to some IBM commands.
> >
> >
> >
> > Thanks,
> > Wanda
> >
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---