Re: chgc0100 exit point. was Default for command without default value?

[thomas@xxxxxxxxxxx]

On Fri, 03 August 2001, "Ed Fishel" wrote:

> >Is this the purpose of the new chgc0100 exit pgm?  Provides the ability to
> >customize parm values, but thru the registered exit pgm route, not thru a
> >customized version of the cmd.
> 
> Yes, that is one of its main purposes. The change command exit point and
> the retrieve command exit point can also be used to determine what command
> parameters are being used.
> 
> It has always been a fact that if you provide a customized version of a
> command in a library that is ahead of QSYS in the library list, that a user
> that does not want to use that version of the command can key
> QSYS/Command-name from the command line. So if you customize a command to
> provide some type of security, then any user that can use a command line
> can bypass that security. Hopefully, the two new command exit points allow
> for a more secure design.

I had a case where a customer had replaced SNDMSG with a version that didn't 
have a TOMSGQ() parameter. (Hey, don't ask me WHY.) Qualifying to QSYS 
everywhere in the CL programs was the obvious correct response given the time 
available. (The more correct long-term response is to use QMHSNDM I think.)

Reasons customers have for customizing commands are definitely wide ranging. I 
hope this new facility allows workarounds as above. If not, third-party code 
will have interesting times ahead.

Tom Liotta


-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---