Re: Changing user profiles without *SECADM; adding *SECADM withou t ev en hav...

[MacWheel99@xxxxxxx]

> From: burnsbm@echoincorporated.com (Burns, Bryan)
>  
>  Removing command line access is not an option.
>  We are at QSECURITY level 30.

You are in same situation as we are with BPCS, except we manage without 
adopted authority, but we do give our users special authorities, via user 
groups, that you are not giving yours.

Your <most profile attributes> identifies as the first thing to your users as 
being
>   Initial program to call  . . . .   EX400C       
>     Library  . . . . . . . . . . .     ECALIB  

Your <DSPPGM of the initial menu> identifies it as using adopted authority.
>  Program  . . . . . . . :   EX400C        Library  . . . . . . . :   ECALIB
>   Owner  . . . . . . . . :   AMAPICS
>     Use adopted authority  . . . . . . . . . . . . . :   *YES

This tells me that you need to check with the MAPICS Security Documentation 
to determine if this use of adopted authority is how the software is supposed 
to function.  Are you also in MAPICS_L?

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)
AS/400 Data Manager & Programmer for BPCS 405 CD Rel-02 mixed mode (twinax 
interactive & batch) @ http://www.cen-elec.com Central Industries of 
Indiana--->Quality manufacturer of wire harnesses and electrical 
sub-assemblies - fax # 812-424-6838

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---