RE: Is there an easy way to find out what LPAR you are in?

-----Original Message-----
From: rob@xxxxxxxxx
<snip>
User needs *ALLOBJ and *SECADM. Tried *ALLOBJ and *SERVICE; that didn't
work. Just some silly thought that *SERVICE authority seemed a natural
fit for the SERVICE menu. Apparently IBM is under the belief that *SECADM
is needed to do SERVICE.
</snip>

This surprised me. Not that I'm a security expert by any stretch of the imagination. The Security Reference for V5R4 states: "*ALLOBJ All-object special authority gives a user authority to perform all operations on objects." I thought I remembered seeing a flowchart (but couldn't find it) where the first test was "*ALLOBJ? Then don't worry about it."

Not disputing your results, Rob; got too much respect for your abilities and experience to do that. But I had to try this. So I set up a user profile (copy of mine, which has *SECADM special authority and *SECADM user class) with the following definitions:

USRCLS = *PGMR (figured *SECADM might skew the results)
SPCAUT:
*ALLOBJ
*AUDIT
*IOSYSCFG
*JOBCTL
*SAVSYS
*SERVICE
*SPLCTL

Then typed GO SERVICE on a command line and got taken to the Service menu. When I tried option 6, though, it brought up the System/36 Command Entry (36E is our system default), which wasn't very helpful so I typed DSPSRVAGT TYPE(*SRVREGINF) in the command line and it did bring up the Service Agent Registration panel.

Changing the test profile's user class to *SYSOPR yielded the same results. Ditto for *USER.

Maybe there's some other combination that you have that I didn't try, or maybe an exit program, or ? .

Jerry C. Adams
IBM System i Programmer/Analyst
--
B&W Wholesale
office: 615-995-7024
email: jerry@xxxxxxxxxxxxxxx

If Governor Fields is right, I am going to stand by him because he is right. If he is wrong, I am going to stand by him because he is a Democrat. - Senator Augustus Standly (Kansas, 1920's)