I used both DSPAUDJRNE and CPYAUDJRNE with the same result.
What options would you suggest for the trace?
Roger Harman
COMMON Certified Application Developer - ILE RPG on IBM i on Power
________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxx> on behalf of CRPence <crpbottle@xxxxxxxxx>
Sent: Thursday, July 7, 2016 12:02 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Any Infinium experts? Need help with user authority.
On 07-Jul-2016 12:54 -0500, Roger Harman wrote:
User "IWORK" was used as a "copy from" to new user "IDONOTWORK" in
the Infinium application.
System user profiles compare the same as far as groups.
<<SNIP>>
To be sure, the recommendation was not simply to ensure the groups
were the same between each of those user profiles, but to have each of
those user profiles review both their authority to each [supplemental]
group profile and their authority to themselves. So if each of those
user profiles has the same SUPGRPPRF(INFI_01) GRPPRF(INFI), then the
following scripted requests as run by each user should produce identical
output for each of the following users that are presented in the list
for the Display Object Authority (DSPOBJAUT) command invocation:
* *PUBLIC
* *GROUP
* *ADOPT
* cur-user /* IWORK or IDONOTWORK; i.e. the one making the request */
dspobjaut infi *usrprf
dspobjaut infi_01 *usrprf
dspobjaut cur-user *usrprf
No error messages in joblog.
A trace can reveal what may not appear, either that which was removed
or was never made visible, in a joblog. Plus the original mis-compare
in the trace /flow/ can make conspicuous, the origin of an issue for
which the processing differs; e.g. if the transition to an exit from
processing immediately follows a procedure invocation of
isUserRegistered, then probably a logical inference would be that the
user is not [properly] registered [to run the application] is the source
of the issue, irrespective the [lack of] visible messaging to inform of
that origin.?
Auditing *AUTFAIL is on and no AF entries for user "IDONOTWORK".
DSPAUDJRNE ENTTYP(AF) USRPRF(IDONOTWORK) JRNRCV(*CURCHAIN)
FWiW, I was under the impression the Display Audit Journal Entries
(DSPAUDJRNE) is deprecated; that the Copy Audit Journal Entries
(CPYAUDJRNE) is expected to be used instead.?
--
Regards, Chuck
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/midrange-l
[
http://lists.midrange.com/images/small-family.gif]<
http://lists.midrange.com/mailman/listinfo/midrange-l>
MIDRANGE-L Info Page<
http://lists.midrange.com/mailman/listinfo/midrange-l>
lists.midrange.com
To unsubscribe from MIDRANGE-L, get a password reminder, or change your subscription options enter your subscription email address:
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
http://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
midrange.com
