RE: Validity checking program for CRTSAVF/CRTLIB

Chris

since a user with *ALLOBJ has pretty much authority to everything (yes, everything) I think the better way to go would be to remove *ALLOBJ from the user who you don't want to restore the libraries.

It would be very difficult indeed (if not impossible) to secure someone with *ALLOBJ out of anything, especially if they are a knowledgeable user.

Authority to CRTLIB is the least of your problems if you are trying to control a user who has *ALLOBJ and (it sounds like) they won't be co-operative.

Cheers
Evan Harris

At 09:39 AM 04/02/01 +0200, you wrote:

thanks guys.
I'm on V4R4. If I revoke authority on e.g. CRTLIB for a specific user having *ALLOBJ in
the userprofile it will not work. Or am I doing something wrong ?
Thanks
Chris

-----Original Message-----

From: owner-midrange-l@midrange.com [mailto:owner-midrange-l@midrange.com]On Behalf Of Carel Teijgeler

Sent: Saturday, March 31, 2001 06:27

To: MIDRANGE-L

Subject: Re: Validity checking program for CRTSAVF/CRTLIB

Chris,

 

In stead of using a VCP on a system supplied command I would look into granting/revoking authority.

 

Just a suggestion.

 

Regards,

 

Carel Teijgeler

 

 

-------Original Message-------

 

From: Chris Wenk

Date: zaterdag 31 maart 2001 09:38:09

To: MIDRANGE-L@midrange.com

Subject: Validity checking program for CRTSAVF/CRTLIB

 

Hi there

I would like to restrict the usage of CRTSAVF and CRTLIB with a

validity checking program on the command.

Does anybody know where to find out the amount of parameters

CRTSAVF and CRTLIB are using.

Would appreciate an example.

Thanks a lot

Chris

_________________________________________________

IncrediMail - Email has finally evolved - Click Here