× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  • Subject: RE: Validity checking program for CRTSAVF/CRTLIB
  • From: "alan shore" <SHOREA@xxxxxxxx>
  • Date: Mon, 02 Apr 2001 11:44:48 -0400

You are correct. If a user has *ALLOBJ, ALL & EVERYTHING is available to this 
user, which can be VERY dangerous. 
My question is WHY does the user have *ALLOBJ? If the answer is - So that he 
can get his work done, you may want to revisit your security and authorization. 
If the answer is because he is a security officer, or an auditor, why do you 
want to restrict the usage of CRTSAVF and CRTLIB.  
>>> "Chris Wenk" <christophe.wenk@kuehne-nagel.com> 04/02/01 03:39AM >>>
thanks guys.
I'm on V4R4. If I revoke authority on e.g. CRTLIB for a specific user having
*ALLOBJ in
the userprofile it will not work. Or am I doing something wrong ?
Thanks
Chris
  -----Original Message-----
  From: owner-midrange-l@midrange.com 
[mailto:owner-midrange-l@midrange.com]On Behalf Of Carel Teijgeler
  Sent: Saturday, March 31, 2001 06:27
  To: MIDRANGE-L
  Subject: Re: Validity checking program for CRTSAVF/CRTLIB


        Chris,

        In stead of using a VCP on a system supplied command I would look
into granting/revoking authority.

        Just a suggestion.

        Regards,

        Carel Teijgeler


        -------Original Message-------

        From: Chris Wenk
        Date: zaterdag 31 maart 2001 09:38:09
        To: MIDRANGE-L@midrange.com 
        Subject: Validity checking program for CRTSAVF/CRTLIB

        Hi there

        I would like to restrict the usage of CRTSAVF and CRTLIB with a
        validity checking program on the command.
        Does anybody know where to find out the amount of parameters
        CRTSAVF and CRTLIB are using.
        Would appreciate an example.
        Thanks a lot
        Chris



  _________________________________________________
  IncrediMail - Email has finally evolved - Click Here

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---

As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.