Re: USRCLS(*USER) = *ALLOBJ....???

["Al Barsa, Jr." <barsa2@xxxxxxx>]

At 04:16 PM 4/8/99 -0400, you wrote:
>
>>> At COMMON Carol Woodbury said that QSECURITY level 10 is supported if
>>>you are
>>> _currently_ at that level.  Once you change from 10 to anything else,
>>>you're not allowed
>>> to go back to 10.   That's bound to be a rude surprise for some people,
>>>but I like it!!!
>
>>I think that's a damn good idea!  It's about time that people started
>>taking responsibility for their own machines and thiskinda forces folks to
>>think about that issue...:)
>
>   I'm not sure why running my machine at Level 10 means that I have not
>assumed the responsibility for doing so.  What advantage does removing
>Level 10 from my machine give me, the customer, when I specifically want it
>that way?  (BTW, I don't have password protection on my PC or any of my
>Macs either.  But I do have a secure location.)
>
Keep in mind that the ONLY difference between L10 and L20 is that somebody
has to have created the *USRPRF before the user signs on.  The problem with
L10 is that users frequently mis-key their user profile name, and then a
new one is created.  At the least, this can create extra profiles.
Moreover, some software creates files keyed records and/or file members by
*USRPRF which can create data errors.  

Note that anybody at L10 or L20 (who has not had *ALLOBJ revoked from their
user profile - which is the default) with command line access has the
ability to delete anything from the operating system (like the CALL command)!

Al




+--------------------------------------------------+
| Please do not send private mail to this address. |
| Private mail should go to barsa@ibm.net.         |
+--------------------------------------------------+

Al Barsa, Jr. - Account for Midrange-L
Barsa Consulting, LLC.  
400 > 390

Phone:  914-251-1234
Fax:    914-251-9406
http://www.barsaconsulting.com
http://www.taatool.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---