Re: pgp?

[edfishel@xxxxxxxxxx]

>Where can I find information concerning the primary group profile.  I
>have a number of objects (all types) that are owned by a programmer with
>the PGP = QPGMR.  When I try to change the ownership of the object to
>QPGMR, I get a message that says the owner and pgp cannot be the same.
>What is the impact of changing the pgp to *none? and then changing the
>owner to QPGMR?

Wayne,

The IBM Security Reference manual discusses primary group authority.
Performance should be the same if you make QPGMR the owner of the objects
instead of their primary group profile. Once QPGMR is the owner of the
objects, then QPGMR and every user profile that has QPGMR as a group
profile will be allowed to grant and revoke authority of the objects. They
would not be able to do this with QPGMR as the primary group unless QPGMR
had *ALL primary group authority.

Ed Fishel


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---