Re: Best Practices

Officially...both..as you're comparing apples to oranges..

Authorization list group like objects while group profiles group like users.

You assign your programs and tables to authorization lists, your users
to group profiles then authorize the group profile to the
authorization list.

So for example,
Authoritzation list: APOBJ
Group Profle: GRPAP

GRPAP would have *USE authority to APOBJ.

Note that you want to limit the number of group profiles you assign
users too as the authority checking can be a performance issue. Rob
Berendt at Dekko has some posts in the archives about this.

HTH,
Charles


On Mon, Aug 15, 2011 at 10:22 AM, Cyndi Bradberry <CyndiB@xxxxxxxx> wrote:

Which is best, Authorization lists or Group Profiles ?



Years ago, we setup Group Profiles, assigned everyone to a group, and
assigned authority to the group. Of course, with people trading jobs,
they are all snafu'd.



I would like to know which way is the best way to restructure our
security.



Cyndi B.

Boise, ID

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.