>Frank Kolmann wrote: >I dont have a reason as such. One of our programmers >modified a jobs *LIBL (system portion) with CHGSYSLIBL. >Could not even do a SYS REQ cancel, or SIGNOFF. >It is simply something that is very easy to do and >I suspect will disable the AS400. >IBM should prevent the backwards compatibility libs >getting into the SYSLIBL. > Frank, Your programmer didn't have a reason? That's not very logical. Sounds like she/he also has *ALLOBJ authority if she/he has access to the CHGSYSLIBL command (ships PUBLIC *EXCLUDE). Likewise, to change system value QSYSLIBL you need special authority not normally recommended for a programmer. Do you know what other damage an *ALLOBJ user can do to your system if they just try things for no reason. These a few commands that spring to mind (I won't mention them here in case your programmer is watching :)) - all of which are just too easy to use. I think you are asking too much for IBM to prevent these sorts of programmer actions. Greg. _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com
As an Amazon Associate we earn from qualifying purchases.
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.