Qsecofr access

["Allen, Stuart" <sallen@xxxxxxxxxxxx>]

I have the following setup for authorised users/programs to have authority
to QSECOFR's userprofile:

                            Object     -----Object------   ------Data-------

 User         Group        Authority   O   M   E   A   R   R   A   U   D   E

 QSYS                      *ALL        X   X   X   X   X   X   X   X   X   X

 INTERCEPT                 USER DEF    X   X               X   X   X   X

 ALLENS                    USER DEF    X   X               X   X   X   X

 MYERSP                    USER DEF    X   X               X   X   X   X

 MORRISAM                  USER DEF    X   X               X   X   X   X

 STX400                    USER DEF    X   X               X   X   X   X

 *GROUP       QSECOFR      *ALL        X   X   X   X   X   X   X   X   X   X

 *PUBLIC                   *EXCLUDE  

Intercept and STX400 are programs, ALLENS, MYERSP & MORRISAM are users.

                                                                         
However, an operator managed to change the QSECOFR password!  They have a
following authorities:

User        Group       *ALL  *AUD  SYS  *JOB  *SAV  *SEC  *SER  *SPL  User

Profile     Profiles     OBJ   IT   CFG   CTL   SYS   ADM  VICE   CTL  Class

EADESP                   X                X     X     X                *PGMR

            QPGMR        X                X     X



I assume its the *secadm thats letting them do it, but this user needs to be
able to change/add/delete userprofiles, BUT NOT QSECOFR!!!  How can i set
things up so that this is the case?

Regards,
Stuart
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---