Re:RE: strwtr auth user

[Eric Sundell PMI <esundell@xxxxxxxxxxxxx>]

Our users had a nasty habit of starting the printers with their own outqs,
and
starting and stopping the writers, using other department's printers and
there
was a fear of sensitive data being looked at by the wrong people. we use the
group authorities and a menu system and have had very few problems.

my 2 cents

Eric Sundell
AS400/PC Specialist

____________________Reply Separator____________________
Subject:    RE: strwtr auth user
Author: "Evan Harris" [SMTP:spanner@ihug.co.nz]
Date:       5/27/99 1:03 PM

At 09:33 27/05/99 -0700, you wrote:
>>how can i grant individual users authority. to start their own print
>writers?
>
>To start a print writer a user need authority to the *OUTQ and the *DEVD.
>
>Try assigning *CHANGE authority to these 2 objects for the user or group
>profile.
>

Unless you *really* want to exclude everybody but the users entitled to
start the printer, this will take you on your first few steps to eternal
pain and suffering (i.e. hell)

If you want users to be able to start their own writers, consider granting
the necessary authority to *PUBLIC so that when you get the "Mary left so
now Fred needs to start the printer" you don't have to mess around with
private authorities, you just have to train them or grant them access to
the commands.

I generally make this stuff public and use use *PUBLIC *EXCLUDE for
outqueues I want to secure. This simplifies both the auditing of the
security and the maintenance of it.

Well, that's my opinion anyway !

Cheers
Evan Harris
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---