Re: Security Question

I used a utility, SCNMSGF, to search QCPFMSG for "authorized to this
command" and didn't get any hits. I beat on it some more and settled with
"authorized to command" (dropped "this") and got a few hits.
Message Sev Text
CPD0032 30 Not authorized to command &2 in library &3.
CPD9B16 40 Cannot remove line &1. Not authorized to command.
CPD9808 20 Not authorized to command &1 in &2.
CPF334F 30 Not authorized to command Delete Expired Spooled file
CPF9824 40 Not authorized to command &1 in library &2.
CPI39FE 0 Not authorized to command &1.
A couple I threw out. Leaving
Message Sev Text
CPD0032 30 Not authorized to command &2 in library &3.
CPD9808 20 Not authorized to command &1 in &2.
CPF9824 40 Not authorized to command &1 in library &2.
CPI39FE 0 Not authorized to command &1.

Then I used a generic user profile and typed in PWRDWNSYS and hit F4. I
got CPD0032. Rest of the joblog was worthless.
Message ID . . . . . . : CPD0032
Date sent . . . . . . : 01/08/08
Message type . . . . . : Diagnostic

From . . . . . . . . . : DUMMY

From program . . . . . . . . . : QCARULE

From library . . . . . . . . : QSYS
Instruction . . . . . . . . : 07A7

To program . . . . . . . . . . : QUIMNDRV
To library . . . . . . . . . : QSYS
Instruction . . . . . . . . : 060C

So, I added *JOBCTL to that user and logged off/on and got the same.
So, then I editted the object authority on the command to give that user
*USE and removed *JOBCTL from that user. Log off/on and got CPD0175.
Changed the user id by setting LMTCPB to *NO. Log off/on and I can at
least prompt the command. Got wild and crazy and tried
PWRDWNSYS CONFIRM(*YES)
and got CPF1038
Cause . . . . . : The user does not have the authority to the STRSBS,
ENDSBS, ENDSYS, or PWRDWNSYS command.

Did you check out the authority to those commands also?

Rob Berendt