Re: Does QSYS have to own QINSTAPP programs created for LODRUN

On Wed, 12 December 2001, "John Earl" wrote:

> ===>Thinking about it now Tom, I rememeber that if the profile
> that owns QINSTAPP does not exist, a CPF error message is
> generated to the job stating that the proile is not known to the
> current system and ownership of program QINSTAPP has been
> assigned to QDFTOWN.
>
> I suppose that if you could monitor that CPF message, you could
> recoever from it, but the monitor would have to be outside of the
> QINSTAPP program because the program has yet to be called when
> the CPF message is generated.

Yeah, Steve posted authoritative (IMO) documentation covering this. (Sheesh, 
who'd've thought to look in the obvious place?) But that help text (on V4R4) 
continues with an interesting tidbit later:

   Note:  If the system security level on which the LODRUN command
   is run is 40 or greater, and the QINSTAPP program validation
   value is missing or incorrect, the system attempts to translate
   the program again.  If this fails, the program is restored, but
   all public and private authorities are revoked and ownership of
   the program is transferred to the QDFTOWN user profile.  The
   LODRUN command does not transfer control to the QINSTAPP program
   in this case.

Odd that it doesn't restore at all if the owner doesn't exist, rather than 
simply changing owner to QDFTOWN. But it does restore when "program validation 
value is missing or incorrect" -- at seclvl 40.

Be interesting to track the history of all this back to see if it might've 
related to Brad's programmer's concerns about LODRUN, perhaps from security 
issues way back when.

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/