Re: HOWTO limit Command line access?

[Pete Hall <peteh@xxxxxxxxxx>]

At 15:46 09/30/1998 , Subba Rao wrote:
>How do I limit Command line access to normal users i.e. in the USER
>class?
>I want them to interface with the system via Menu only. Can this be set
>system
>wide for all USER class members?
>
>Thank you in advance.

Change the user profile to LMTCPB(*YES). This will prevent executing all but a 
very few commands (like SIGNOFF and CHGPWD) from the command line. The command 
line itself can be removed by changing the *MENU description, but it's probably 
not necessary. You can easily change a bunch of user profiles by using 
WRKOBJPDM to display OBJTYPE(*USRPRF) and writing a PDM macro (F14) that does 
CHGUSRPRF &N LMTCPB(*YES). There's no built in easy way to subset to just the 
USER class profiles, but you might be able to DSPUSRPRF to an outfile, or use 
PDM to drive a CL program that does a RTVUSRPRF and checks the class, or if 
you're really ambitious, you could probably use the security APIs.


Pete Hall
peteh@inwave.com 
http://www.inwave.com/~peteh/

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---