RE: chgobjown

[Vernon Hamberg <vhamberg@xxxxxxxxxxx>]

There are limits to the size of a user profile, including the list of 
objects owned by it. These have gone up in recent releases, so there 
might not be a problem. Still, I believe it is recommended that no 
single profile owns everything on a system. And that it should not be 
QSECOFR, IIRC. Consider this - if a program were owned by QSECOFR, 
any user with adequate authority only has to change it to run as 
*OWNER and thereby gain all the authority of QSECOFR.

There is a KB article on user profile size at

http://www-1.ibm.com/support/docview.wss?uid=nas137201406df087039862565c2007d3436&rs=110

FYI
Vern

At 08:10 AM 10/13/2005, you wrote:

> Everything on our system is owned by QSECOFR, so we don't normally run into
> this. We do try to make the scheduled jobs run under QSYSOPR, and there are
> a few special report programs that run under an actual user's profile. In
> those cases, we have a data area with the profile it is to run under, and we
> just change that rather than changing the CL program.
>
> Francis Lapeyre
> IS Dept. Programmer/Analyst
> Stewart Enterprises, Inc.
> Voice: (504) 729-1468 or (800) 257-1610, ext. 1468
> FAX: (504) 729-1457
> E-mail: flapeyre@xxxxxxxx
>
>
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of William P Hunter
> Sent: Wednesday, October 12, 2005 5:44 PM
> To: MIDRANGE-L@xxxxxxxxxxxx
> Subject: chgobjown
>
> Our IT manager is leaving after 18 years; needless to say she owns almost
> everything on the system. Does anyone have recommendations whether to:
> a)change ownership to the new IT manager b)create a IT group profile and set
> it as the owner c)change ownership to qdftown d)your recommendation is...
>
> Thanks Bill Hunter
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.