Re: CMD calls what program?

["Al Barsa, Jr." <barsa2@xxxxxxx>]

At 11:32 AM 12/29/1999 -0800, you wrote:
>Just a thought.  Someone made the mention of changing
>the authority on the UPDDTA command to Public *EXCLUDE.
>
>Thinking on it, I did a DSPCMD on UPDDTA and then
>also changed the authority of QDZCMDP in QSYS to
>Public *EXCLUDE.  If someone knows what they are doing
>they can just do a CALL QSYS/QDZCMDP and pass the
>correct parameters and call it directly, bypassing the security
>on the command.

The proper method to exclude someone from a command is to change the 
authority for said person (*PUBLIC in this case) to *EXCLUDE for the 
command object.  OS/400 was not designed for you to go mucking with the 
shipped authorities of objects in QSYS.

As it is, authority is retained when you install commands into QSYS.  This 
is the way God designed the heavens and the universe.

Happy Y2K

Al




+--------------------------------------------------+
| Please do not send private mail to this address. |
| Private mail should go to barsa@ibm.net.         |
+--------------------------------------------------+

Al Barsa, Jr. - Account for Midrange-L
Barsa Consulting, LLC.  
400 > 390

Phone:          914-251-1234
Fax:            914-251-9406
http://www.barsaconsulting.com
http://www.taatool.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---