Re: USRCLS(*USER) = *ALLOBJ....???

[John Earl <johnearl@xxxxxxxxxxx>]

Larry,

At COMMON Carol Woodbury said that QSECURITY level 10 is supported if you are
_currently_ at that level.  Once you change from 10 to anything else, you're 
not allowed
to go back to 10.   That's bound to be a rude surprise for some people, but I 
like it!!!

jte


Larry Bolhuis wrote:

> John,
>
>   Yup this works and it's even in the book (see below).  I especially like the
> part about Security level 10!
>
>   - Larry
>
> Quote from the Work Management GUied (V4R3):
> ============================================================================
> 2.3.107 QSECURITY System Value
>
> QSECURITY is the system security level indicator.
>
> For unattended IPL, previously requested changes to the security level are 
>made
> during the IPL.
>
> QSECURITY can be:
>
> | 0 '10': The system does not require a password to sign-on. The user has
> | access to all system resources. Special authorities can be added or
> | removed from a user profile by using the CRTUSRPRF or CHGUSRPRF
> | command.
>
> | Note: This security level is no longer supported.  <<<<<<<*******<<<<<<!!!
>
> <snip>
>
> All user profiles will have special authorities granted or revoked based on
> their user class when changing from a security level 10 or 20 system to 
>security
> level 30 or higher.
>
> The QSECURITY system value can be changed at any time but the change to the
> security level does not take effect until the next IPL as follows:
>
> <snip>
> ==========================================================================
>
> John Earl wrote:
> >
> > Larry,
> >
> > Larry Bolhuis wrote:
> > >
> > > > if the profiles were set up when the system was at 20, *allobj would be 
>there.
> > > > later  changing it to 30 would not undo that automatically.
> > >
> > > Incorrect.  Any user with *ALLOBJ from being at Level 10 or 20 will lose 
>it
> > > during the IPL where security is moved above 20, unless that user is a 
>*SECOFR
> > > class.
> >
> > Are you sure about this?   I've never known it to work this
> > way?  Maybe you have had more recent experience on this than
> > I?
> >
> > jte
> >
> > --
> > John Earl                       johnearl@toolnet.com
> >
> > PowerTech Toolworks             206-575-0711
> > PowerLock Network Security      www.toolnet.com
> > The 400 School                  www.400school.com
>
> --
> Larry Bolhuis         |
> Arbor Solutions, Inc  | Two rules to success in life:
> (616) 451-2500        | 1. Never tell people everything you know.
> lbolhui@ibm.net       |
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl   johnearl@toolnet.com

PowerTech Toolworks  206-575-0711
PowerLock Network Security www.toolnet.com
The 400 School   www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---