Re: USRCLS(*USER) = *ALLOBJ....???

John,

  Yup this works and it's even in the book (see below).  I especially like the
part about Security level 10!

  - Larry



Quote from the Work Management GUied (V4R3):
============================================================================
2.3.107 QSECURITY System Value

QSECURITY is the system security level indicator. 

For unattended IPL, previously requested changes to the security level are made
during the IPL. 

QSECURITY can be: 

| 0 '10': The system does not require a password to sign-on. The user has 
| access to all system resources. Special authorities can be added or 
| removed from a user profile by using the CRTUSRPRF or CHGUSRPRF 
| command. 

| Note: This security level is no longer supported.  <<<<<<<*******<<<<<<!!!

<snip>

All user profiles will have special authorities granted or revoked based on
their user class when changing from a security level 10 or 20 system to security
level 30 or higher. 

The QSECURITY system value can be changed at any time but the change to the
security level does not take effect until the next IPL as follows: 

<snip>
==========================================================================

John Earl wrote:
> 
> Larry,
> 
> Larry Bolhuis wrote:
> >
> > > if the profiles were set up when the system was at 20, *allobj would be 
>there.
> > > later  changing it to 30 would not undo that automatically.
> >
> > Incorrect.  Any user with *ALLOBJ from being at Level 10 or 20 will lose it
> > during the IPL where security is moved above 20, unless that user is a 
>*SECOFR
> > class.
> 
> Are you sure about this?   I've never known it to work this
> way?  Maybe you have had more recent experience on this than
> I?
> 
> jte
> 
> --
> John Earl                       johnearl@toolnet.com
> 
> PowerTech Toolworks             206-575-0711
> PowerLock Network Security      www.toolnet.com
> The 400 School                  www.400school.com

-- 
Larry Bolhuis         |
Arbor Solutions, Inc  | Two rules to success in life:
(616) 451-2500        | 1. Never tell people everything you know.
lbolhui@ibm.net       |
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---