RE: Question on Creating User Profiles...

["Peter Vidal" <Peter_Vidal@xxxxxxxx>]

I am in the same boat as you Chuck.  Have not worked with security tools setups
since 1998...but at least I can give you more data.

If we have a command like CRTPRFLIVE, we will have the object authority layout
something like this:

*CMD:

                         Object
User        Group       Authority
QSECOFR                 *ALL
PSMITH              *USE
JROSE                    *USE
*PUBLIC                 *EXCLUDE

*CLP:
                         Object
User        Group       Authority
QSECOFR                 *ALL
*PUBLIC                 *CHANGE

Just the users that can use the command will be included.  Different from your
case, we do not use group authority on this situation specifically.  I
personally do not know the implications of it and I can't test because I have a
lot of restrictions in terms of security tasks like this.

Sorry that I can't help you more.  The guys from the list may bring some more
light on it...

Good luck buddy!
Peter Vidal
Pall Aeropower Corp.
SR Programmer Analyst
WWW.Pall.com
"My religion consists of a humble admiration of the illimitable superior
spirit who reveals himself in the slight details we are able to perceive
with our frail and feeble mind."
Albert Einstein