RE: Restricting Nosey Users Message Access

Domino has an authority called depositor.  This allows someone to submit a 
record, but not read it, or any others.  Common example given in the 
classes is Course evaluations.

To do the same to a message queue wouldn't you need to do something like
EDTOBJAUT
A couple of F11's,
                         Object    ---------------Data---------------
User        Group       Authority  Read  Add  Update  Delete  Execute
ROB                     *ALL        X     X     X       X        X 
QSECOFR                 USER DEF    X     X     X       X 
*PUBLIC                 *CHANGE           X 


Test this.  If it works, you could always try this to change all message 
queue's:
CHGAUT OBJ('/qsys.lib/qusrsys.lib/*.msgq')
       USER(*PUBLIC) 
       DTAAUT(*W) 

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin 




"Chuck Lewis" <clewis@xxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
03/18/2003 04:29 PM
Please respond to Midrange Systems Technical Discussion
 
        To:     "'Midrange Systems Technical Discussion'" 
<midrange-l@xxxxxxxxxxxx>
        cc: 
        Fax to: 
        Subject:        RE: Restricting Nosey Users Message Access


Will I run into any problems with that ? I had thought about that but 
wasn't
sure...

Chuck



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Paul Nelson
Sent: Tuesday, March 18, 2003 4:23 PM
To: Midrange Systems Technical Discussion
Subject: Re: Restricting Nosey Users Message Access

Have you tried restricting the message queues?

Paul Nelson
Arbor Solutions, Inc.
708-670-6978 Cell
708-923-7354 Home
pnelson@xxxxxxxxxx

----- Original Message -----
From: "Chuck Lewis" <clewis@xxxxxxxxxx>
To: "midrange-l" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, March 18, 2003 2:59 PM
Subject: Restricting Nosey Users Message Access


> Hi Folks,
>
>
>
> Have an interesting one here.
>
> Users use Shift/Sys Req and option 5. Send a message to do quick 
messages.
>
> Well some of them have figured out that they can do 4. Display messages
and
> change the default of  *WRKUSR  to a valid User Profile name and see 
other
> folks messages that are none of their business.
>
> How can I restrict this ?
>
> Thanks,
>
> Chuck
>
>
>
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.