Re: Changing user profiles without *SECADM; adding *SECADM withou t ev enhav...

["Neil Palmer" <neilp@xxxxxxxxxxx>]

Al,

One correction.  The USEADPAUT parm in the program refers to adopting 
authority from previous programs in the call stack.  As this is the 
initial program, the parm of concern is USRPRF.

Neil Palmer      DPS Data Processing Services Canada Ltd.
50 Acadia Avenue, Ste.102                   AS/400~~~~~
Markham, Ontario, Canada.   ____________          ___  ~ 
Phone:(905) 474-4890 x303   |OOOOOOOOOO| ________  o|__||= 
Cell.:(416) 565-1682 x303   |__________|_|______|_|______) 
Fax:  (905) 474-4898         oo      oo   oo  oo   OOOo=o\ 
mailto:NeilP@DPSlink.com  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
http://www.DPSlink.com     iSeries 400  The Ultimate Business Server





MacWheel99@aol.com
Sent by: owner-midrange-l@midrange.com
2001/01/26 17:06
Please respond to MIDRANGE-L

 
        To:     MIDRANGE-L@midrange.com
        cc: 
        Subject:        Re: Changing user profiles without *SECADM; adding 
*SECADM withou t ev en 
hav...


> From: burnsbm@echoincorporated.com (Burns, Bryan)
> 
>  Removing command line access is not an option.
>  We are at QSECURITY level 30.

You are in same situation as we are with BPCS, except we manage without 
adopted authority, but we do give our users special authorities, via user 
groups, that you are not giving yours.

Your <most profile attributes> identifies as the first thing to your users 
as 
being
>   Initial program to call  . . . .   EX400C 
>     Library  . . . . . . . . . . .     ECALIB 

Your <DSPPGM of the initial menu> identifies it as using adopted 
authority.
>  Program  . . . . . . . :   EX400C        Library  . . . . . . . : 
ECALIB
>   Owner  . . . . . . . . :   AMAPICS
>     Use adopted authority  . . . . . . . . . . . . . :   *YES

This tells me that you need to check with the MAPICS Security 
Documentation 
to determine if this use of adopted authority is how the software is 
supposed 
to function.  Are you also in MAPICS_L?

MacWheel99@aol.com (Alister Wm Macintyre) (Al Mac)
AS/400 Data Manager & Programmer for BPCS 405 CD Rel-02 mixed mode (twinax 

interactive & batch) @ http://www.cen-elec.com Central Industries of 
Indiana--->Quality manufacturer of wire harnesses and electrical 
sub-assemblies - fax # 812-424-6838




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---