RE: Validity checking program for CRTSAVF/CRTLIB

You are correct. If a user has *ALLOBJ, ALL & EVERYTHING is available to this 
user, which can be VERY dangerous. 
My question is WHY does the user have *ALLOBJ? If the answer is - So that he 
can get his work done, you may want to revisit your security and authorization. 
If the answer is because he is a security officer, or an auditor, why do you 
want to restrict the usage of CRTSAVF and CRTLIB.  
>>> "Chris Wenk" <christophe.wenk@kuehne-nagel.com> 04/02/01 03:39AM >>>
thanks guys.
I'm on V4R4. If I revoke authority on e.g. CRTLIB for a specific user having
*ALLOBJ in
the userprofile it will not work. Or am I doing something wrong ?
Thanks
Chris
  -----Original Message-----
  From: owner-midrange-l@midrange.com 
[mailto:owner-midrange-l@midrange.com]On Behalf Of Carel Teijgeler
  Sent: Saturday, March 31, 2001 06:27
  To: MIDRANGE-L
  Subject: Re: Validity checking program for CRTSAVF/CRTLIB


        Chris,

        In stead of using a VCP on a system supplied command I would look
into granting/revoking authority.

        Just a suggestion.

        Regards,

        Carel Teijgeler


        -------Original Message-------

        From: Chris Wenk
        Date: zaterdag 31 maart 2001 09:38:09
        To: MIDRANGE-L@midrange.com 
        Subject: Validity checking program for CRTSAVF/CRTLIB

        Hi there

        I would like to restrict the usage of CRTSAVF and CRTLIB with a
        validity checking program on the command.
        Does anybody know where to find out the amount of parameters
        CRTSAVF and CRTLIB are using.
        Would appreciate an example.
        Thanks a lot
        Chris



  _________________________________________________
  IncrediMail - Email has finally evolved - Click Here

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---