RE: Restricted Interactive RUNQRY

[Bill Erhardt <ERHARDT@xxxxxxxxxxxxx>]

1) Change the Qsys version of the RUNQRY command to prevent *INTERACTION
usage.
2) Enable the QSYS3 version of the command to run *INTERACTIVE
3) Remove QSYS3 from the system library list.
4) When you want to allow interactive query use the CHGSYSLIBL command to
add QSYS3 to the user's system library list.


> -----Original Message-----
> From: Brad Bird [SMTP:BBird@PRIMEINC.COM]
> Sent: Friday, September 08, 2000 6:00 PM
> To:   midrange-l@midrange.com
> Subject:      Restricted Interactive RUNQRY
> 
>   I need help with this security/authority issue.  I created a copy of the
> RUNQRY command into lib QSYS3 which is above QSYS in the System library
> list.  I removed the *INTERACT capability to the new version in QSYS3 and
> it
> indeed prevents the users from running queries interactively.  The problem
> comes in that there is a case whereby we want to run a short query
> interactively; so I qualify the users command to specify QSYS/RUNQRY
> QRY(whatever) so it'll use the version still allowing *INTERACT.  What I
> get
> is the following message:
> 
> Message ID . . . . . . :   QRY2294       Severity . . . . . . . :   30
> Message type . . . . . :   Diagnostic
> Date sent  . . . . . . :   09/08/00      Time sent  . . . . . . :
> 14:59:26
> 
> Message . . . . :   Specified option or F5=Report not allowed.
> Cause . . . . . :   You cannot run your query interactively due to one of
> the
>   following:
>   The authority specified for the RUNQRY command was changed so you are no
>     longer authorized to it.
>   The RUNQRY command was changed to no longer support being run
> interactively.
> Recovery  . . . :   See your system administrator or security officer for
>   assistance.
> 
> So how did it repoint itself back to the restricted version?  How can I
> get
> the QSYS version to work?  I can't change the order of the libs in the
> System Libl for particular users, can I?
> 
> -------------------------
> Brad Bird                                  mailto:bbird@primeinc.com
> Prime, Inc.                                http://www.primeinc.com
> 2740 N Mayfair
> Springfield, MO  65803
> phone:(417) 866-0001 x3211
> fax:  (417) 521-6863
> 
> 
> 
> http://www.primeinc.com
> **********************************************************************
> This email and any files transmitted with it are confidential
> and intended solely for the use of the individual or entity to
> whom they are addressed.  If you have received this email
> in error please reply to the sender of the message.
> 
> The views expressed in this correspondence may not
> reflect the views of Prime, Inc.
> 
> This footnote also confirms that this email message has
> been scanned for the presence of computer viruses.
> ***********************************************************************
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
> MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---