Re: Change user profile without *SECADM

["Francis Lapeyre" <flapeyre@xxxxxxxxx>]

I created an application to re-enable disabled profiles. It runs under
adopted authority (as do all our programs), and it first validates that the
user profile belongs to an active (not terminated) employee. The Security
Office here has an application with which they maintain that cross-reference
file. The day after the termination date, a batch program runs that disables
any terminated employees for that day.

Only the help desk has access to the re-enable application (I can't even run
it; even though I wrote it), and they have to verify that the user on the
phone is who they say they are by verifying the last 4 digits of the SSN.

On Nov 9, 2007 9:27 AM, Al Barsa <barsa@xxxxxxxxxxxxxxxxxxx> wrote:

> With all due respect, I don't this will work with QSECURITY set to the
> default of 40.
>
> Al
>
> Al Barsa, Jr.
> Barsa Consulting Group, LLC
>
> 400>390
>
> "i" comes before "p", "x" and "z"
> e gads
>
> Our system's had more names than Elizabeth Taylor!
>
> 914-251-1234
> 914-251-9406 fax
>
> http://www.barsaconsulting.com
> http://www.taatool.com
> http://www.as400connection.com
>
>
>
>
>             GUY_HENZA@denso-d
>             iam.com
>             Sent by:                                                   To
>             midrange-l-bounce         Midrange Systems Technical
>             s@xxxxxxxxxxxx            Discussion
>                                       <midrange-l@xxxxxxxxxxxx>
>                                                                        cc
>             11/09/2007 10:19
>             AM                                                    Subject
>                                       RE: Change user profile without
>                                       *SECADM
>             Please respond to
>             Midrange Systems
>                 Technical
>                Discussion
>             <midrange-l@midra
>                 nge.com>
>
>
>
>
>
>
>
>  SBMJOB CMD(CHGUSRPRF USRPRF(user_id) PASSWORD(new_password)
> STATUS(*ENABLED)) USER(QSECOFR)
>
> Regards,
>
> Guy
>
>
>
>
>                      "Chris Bipes"
>
>                      <chris.bipes@cross-c        To:       "Midrange
> Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
>                      heck.com>                   cc:
>
>                      Sent by:                    Subject:  RE: Change user
> profile without *SECADM
>                      midrange-l-bounces@m
>
>                      idrange.com
>
>
>
>                      11/09/2007 10:10 AM
>
>                      Please respond to
>
>                      Midrange Systems
>
>                      Technical Discussion
>
>
>
>
>
>
>
> I have a command that calls a CLP to reset user profiles.  This command
> is secured by an Authorization List as well as the CLP.  It allows non
> security users named in the AUTL to re-enable a profile as well as
> change the password.  The password changes forces the flag to change
> password at next sign on.  I would also like to have it write to a log
> but I have not gone that far.  The owner of the command and CLP is
> QSECOFR and it runs under owner adopted authority.
>
> Chris Bipes
> Director of Information Services
> CrossCheck, Inc.
>
>
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tomasz Skorza
> Sent: Friday, November 09, 2007 3:44 AM
> To: midrange-l@xxxxxxxxxxxx
> Subject: Change user profile without *SECADM
>
> Hi
>
> Is it possible to change user profile (enable it) without secial
> authoritie
> *SECADM?
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
>
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.