RE: Changing user profiles without *SECADM; adding *SECADM withou t ev enhaving *SECADM -- MIDRANGE-L

Yes - the initial program has USRPRF(*OWNER).  The owner is AMAPICS.  Now, 
check user profile AMAPICS and see what authority it has.
*ALLOBJ ?  Then every user on your system with this initial program has 
authority to everything !!

...Neil





"Burns, Bryan" <burnsbm@echoincorporated.com>
Sent by: owner-midrange-l@midrange.com
2001/01/26 15:06
Please respond to MIDRANGE-L

 
        To:     MIDRANGE-L@midrange.com
        cc: 
        Subject:        RE: Changing user profiles without *SECADM; adding 
*SECADM withou t ev en 
having *SECADM


Removing command line access is not an option.
We are at QSECURITY level 30.
Here are most profile attributes and a DSPPGM of the initial menu.



User profile . . . . . . . . . . > JILLH 
 User password  . . . . . . . . .   *SAME 
 Set password to expired  . . . .   *NO 
 Status . . . . . . . . . . . . .   *ENABLED 
 User class . . . . . . . . . . .   *USER 
 Assistance level . . . . . . . .   *SYSVAL 
 Current library  . . . . . . . .   *CRTDFT 
 Initial program to call  . . . .   EX400C 
   Library  . . . . . . . . . . .     ECALIB 
 Initial menu . . . . . . . . . .   *SIGNOFF 
   Library  . . . . . . . . . . . 
 Limit capabilities . . . . . . .   *PARTIAL

    Special authority  . . . . . . .   *NONE 
                + for more values 
 Special environment  . . . . . .   *NONE 
 Display sign-on information  . .   *YES 
 Password expiration interval . .   *SYSVAL 
 Limit device sessions  . . . . .   *NO 
 Keyboard buffering . . . . . . .   *SYSVAL 
 Maximum allowed storage  . . . .   *NOMAX 
 Highest schedule priority  . . .   3 
 Job description  . . . . . . . .   QDFTJOBD 
   Library  . . . . . . . . . . .     QGPL 
 Group profile  . . . . . . . . .   *NONE 
 Owner  . . . . . . . . . . . . .   *USRPRF 
 
Group authority  . . . . . . . .   *NONE 
 Group authority type . . . . . .   *PRIVATE 
 Supplemental groups  . . . . . .   *NONE 
                + for more values 
 Accounting code  . . . . . . . .   *BLANK 
 Document password  . . . . . . .   *SAME 
 Message queue  . . . . . . . . .   JILLH 
   Library  . . . . . . . . . . .     QUSRSYS
 Delivery . . . . . . . . . . . .   *NOTIFY 
 Severity code filter . . . . . .   0 
 Print device . . . . . . . . . .   PRTP0 
 Output queue . . . . . . . . . .   *WRKSTN 
   Library  . . . . . . . . . . . 
 Attention program  . . . . . . .   *NONE 
   Library  . . . . . . . . . . .





Program  . . . . . . . :   EX400C        Library  . . . . . . . :   ECALIB

 Owner  . . . . . . . . :   AMAPICS

 Program attribute  . . :   CLP

 

 Program creation information:

   Program creation date/time . . . . . . . . . . . :   10/03/96  10:00:16

   Type of program  . . . . . . . . . . . . . . . . :   OPM

   Source file  . . . . . . . . . . . . . . . . . . :   SOURCE

     Library  . . . . . . . . . . . . . . . . . . . :     ECALIB

   Source member  . . . . . . . . . . . . . . . . . :   EX400C

   Source file change date/time . . . . . . . . . . :   10/03/96  09:59:36

   Observable information . . . . . . . . . . . . . :   *ALL

   User profile . . . . . . . . . . . . . . . . . . :   *OWNER

   Use adopted authority  . . . . . . . . . . . . . :   *YES

   Log commands (CL program)  . . . . . . . . . . . :   *JOB

   Allow RTVCLSRC (CL program)  . . . . . . . . . . :   *YES

   Fix decimal data . . . . . . . . . . . . . . . . :   *NO



Bryan Burns
Echo, Inc.
Lake Zurich, IL
Burnsbm@echoincorporated.com 




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---