RE: min sec level to allow chgusrprf

["John Earl" <john.earl@xxxxxxxxxxxxxxxxxx>]

> what would be the min sec level required to allow a
> *sysopr to run chgusrprf?
> 
> ie:
> 
> usrcls
> spcaut

Jerry,

The minimum *Special Authority required would be *SECADM.
However, in order to change someone else's profile, you'll
need at least *CHANGE authority to the profile.  So as Al
mentioned, you have to pay attention to who owns and who is
authorized to the *USRPRF object itself.  You could solve
the access problem by giving your operator *CHANGE authority
to everyone's profile, but that's like giving the operator
everyone's password. :(

A better plan would be to create a profile that adopts
*SECADM and *ALLOBJ special authority and performs the
CHGUSRPRF.  Then you only have to give your operator *USE
authority to the program that adopts.

jte