Re: Changing user profiles without *SECADM; adding *SECADM without ev enhaving *SECADM

["Neil Palmer" <neilp@xxxxxxxxxxx>]

For that users profile, look for the Initial Program.
Do a DSPPGM on that and look to see if it says User Profile *OWNER.
If it does, look for the user profile name in the Owner fileld (top of 
screen).
DSPUSRPRF for that owner and see what authorities they have.
This will work as long as the initial program stays in the program stack 
(DSPJOB, #11).


..Neil





"Burns, Bryan" <burnsbm@echoincorporated.com>
Sent by: owner-midrange-l@midrange.com
2001/01/26 10:32
Please respond to MIDRANGE-L

 
        To:     midrange-l@midrange.com
        cc: 
        Subject:        Changing user profiles without *SECADM; adding *SECADM 
without ev en 
having *SECADM


We have a user profile with special authority *NONE that can do a 
CHGUSRPRF
and add *SECADM special authority to another profile.  This is done from a
command line on the initial menu.  This initial menu has three options:
EXECUTE OFFICE, EXECUTE MAPICS, and SIGN OFF. 

How is this possible?  We are on V4R4 and at cume level CO252440.

The profile in question has USER CLASS *USER, GROUP PROFILE *NONE, OWNER
*USRPRFand LIMIT CAPABILITIES *PARTIAL.

I think this may be due to adopted authority, but I am not a programmer 
and
I have dug as far as I can into this.  Can someone shed some light on 
this?

Thanks in advance.
 
Bryan Burns
Echo, Inc.
Lake Zurich, IL
Burnsbm@echoincorporated.com 




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---