Re: Take RUNQRY out of LMTCPB

[thomas@xxxxxxxxxxx]

On Tue, 12 February 2002, Mike.Collins@syan.co.uk wrote:

> > If a user is excluded by limited capability from running a particular
>   >command, this will include running it from the 'Selection or command'
>   > prompt on an IBM menu.
>
> Absolutely, I was merely clarifying an earlier point made that users with
> limited capabilities couldn't run ANYTHING  from a command line, even
> commands which do allow limited users. the actual definition supplied by
> IBM is:
>
>   Commands cannot be
>  run when issued from a command line or by selecting an
>  option from a command grouping menu such as CMDADD,
>  but can still be run from a command entry screen.

This is more or less correct.

That is, in at least one way, it is correct that this is the actual definition 
supplied by IBM. The help text for the CHGUSRPRF LMTCPB() parameter includes 
the statement above at least through V5R1.

But it clearly is either an incorrect statement or a statement that needs 
significant clarification from IBM because it flies in the face of experience 
and contradicts manuals such as the Security Reference.

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/