Mike,

As Peter pointed out the user attempting to swap to another profile has to have at least *USE rights to the target profile. By having the program that performs the swap owned by an *ALLOBJ authorized and adopts authority you achieve this condition.

For a disabled profile the program performing the swap has to adopt *ALLOBJ and *SECADM authority. You can then use *NOPWDCHK as the password.

http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_72/apis/QSYGETPH.htm

Thanks,

Gary Monnier
IT Software Engineer CSM, CSPO


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Smith, Mike
Sent: Thursday, November 12, 2015 8:30 AM
To: Midrange Systems Technical Discussion (midrange-l@xxxxxxxxxxxx)
Subject: Testing User Profile Swapping.

I am trying to test out profile swapping. I'm having mixed results and not sure where what to check next.
I've listed below the user I'm trying to swap to and 3 different users I'm swapping from.
The first original Profile works, and I can swap back and forth.
The other 2, I am not having any luck with.


SWAPPROFILE =TESTSWAP this is profile similar to VENDOR

Original Profile =POWERMS This is a power user profile.
Original Profile =MSMITH This is a normal user profile
Original Profile = VENDOR This is a group profile


SWAPPROFILE is owned by QSECOFR with *public exclude, Qsecofr group has *ALL, MSMITH has *USE and VENDOR has *USE

I noticed after the call to the QSYGETPH API that when running under MSMITH that I receive a CPF22E3 "profile Disabled"
However I don't receive this when running under POWERMS.

I tried increasing the authority of MSMITH to *ALL for profile SWAPPROFILE, but still receive the same error.

Any idea whats going on here?

Mike


NOTICE: This message, including any attachment, is intended as a confidential and privileged communication. If you have received this message in error, or are not the named recipient(s), please immediately notify the sender and delete this message.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.


This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2019 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].