Re: Any Infinium experts? Need help with user authority.

I'd be surprised if the OS authorities were being used by the application.

Every ERP system I've seen has it's own authority control...

Charles

On Thu, Jul 7, 2016 at 1:54 PM, Roger Harman <roger.harman@xxxxxxxxxxx>
wrote:

User "IWORK" was used as a "copy from" to new user "IDONOTWORK" in the
Infinium application.


System user profiles compare the same as far as groups.


No error messages in joblog.


Auditing *AUTFAIL is on and no AF entries for user "IDONOTWORK".

DSPAUDJRNE ENTTYP(AF) USRPRF(IDONOTWORK) JRNRCV(*CURCHAIN)



Roger Harman

COMMON Certified Application Developer - ILE RPG on IBM i on Power







________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxx> on behalf of CRPence <
crpbottle@xxxxxxxxx>
Sent: Thursday, July 7, 2016 10:34 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Any Infinium experts? Need help with user authority.

On 07-Jul-2016 12:16 -0500, Roger Harman wrote:

<<SNIP>> I've compared the users and they appear to be the same. The
original user works fine. I have this nagging thought that I'm
missing something like authority to levels or cost centers (but, I
may be thinking about JDE). Any suggestions?

Without user profile names, I got lost in pronouns; not sure what is
who or from where. Regardless, verify\compare the authority of each
user to the group [and supplemental group] user profiles, and the
authorities of each user to itself. If the issue persists, activate
Auditing (QAUDLVL) for at least *AUTFAIL and review for any T-AF entries
generated during the processing that fails; correct any resource
authorities to prevent the issue. If the issue persists even after
resolving any T-AF issues, then probably compare a trace of the failing
requester and the successful requester to see where they start to
mis-compare in the flow [and data]; try to infer from the errors and\or
change in flow, what might need to be done to correct the issue -- e.g.
something like a row-not-found condition for a file that seems to have a
list of registered user profile names might suggest that there needs to
be a request made like the effect of an [imaginary] ADDINFIUSR command.

--
Regards, Chuck

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
[http://lists.midrange.com/images/small-family.gif]<
http://lists.midrange.com/mailman/listinfo/midrange-l>

MIDRANGE-L Info Page<http://lists.midrange.com/mailman/listinfo/midrange-l

lists.midrange.com
To unsubscribe from MIDRANGE-L, get a password reminder, or change your
subscription options enter your subscription email address:



or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.