Re: Restricting Users with *ALLOBJ in the Advanced Job Scheduler

Here's how I believe authority checking works. It's a short-circuit
mechanism - the first satisfied scenario causes authority checking to
stop:

1. User *ALLOBJ
2. User Private Authority
3. User on AUTL
4. Group *ALLOBJ
5. Group Private Authority
6. Group on AUTL
7. *PUBLIC


On Fri, Aug 15, 2008 at 7:30 AM, Jerry Adams <Jerry@xxxxxxxxxxxxxxx> wrote:

I doubt it. I recall attending a security session at COMMON where it was pointed out that the first thing security checks is *ALLOBJ. If the answer is 'Yes,' nothing else is checked. *ALLOBJ is God-like; there are no appeals.

Jerry C. Adams
IBM System i Programmer/Analyst
B&W Wholesale
office: 615-995-7024
email: jerry@xxxxxxxxxxxxxxx

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Burns, Bryan
Sent: Thursday, August 14, 2008 3:45 PM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: Restricting Users with *ALLOBJ in the Advanced Job Scheduler

Is there a way to restrict a user with *ALLOBJ user profile special authority from adding a job to the advanced job scheduler? I changed the function authority to *EXCLUDE for the user but the user can still add a job.

Bryan Burns
iSeries Specialist
ECHO, Incorporated
Lake Zurich, Illinois

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.