RE: Is DFU capability a part of the *ALLOBJ privlidge or can DFUbe separately denied?

*ALLOBJ means *ALLOBJ

Security check goes something like,
1) Does the user have *ALLOBJ, then allow.
2) ....

Now, if instead of the user having *ALLOBJ, you've given *ALLOBJ to the
group profile the user belongs to, then you could explicitly deny the
user access to the object; since the users individual permissions are
check before his group profile permissions.

HTH,


Charles Wilt
--
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121
  

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx 
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Dave Odom
Sent: Wednesday, January 03, 2007 1:10 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Is DFU capability a part of the *ALLOBJ privlidge or 
can DFUbe separately denied?

Probably dumb question but I have to ask...
 
Is there a way to take away a users capability to use DFU or is it a
part of having *ALLOBJ authority?
 
Thanks in advance,
 
Dave Odom
Arizona
-- 
This is the Midrange Systems Technical Discussion 
(MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.