On the System Request Menu, you don't need command line access, but you do need authority to the actual commands behind the menu options.
Mark Clanton
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Thursday, October 26, 2017 2:55 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: What commands should have ALWLMTUSR(*YES)?
Well, I just decided to wing it. I created a user profile without command line access and they can still do a Sys-Req 4 and see messages after I changed DSPMSG.
Full speed ahead!
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: Rob Berendt <rob@xxxxxxxxx>
To: midrange-l@xxxxxxxxxxxx
Date: 10/26/2017 03:37 PM
Subject: What commands should have ALWLMTUSR(*YES)?
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>
In general I understand that people without command line access should not
have access to commands, except for a few with ALWLMTUSR(*YES).
An example of one that most people have access to is SIGNOFF.
And some could even argue against that. For example, no, I want them to
only run it from our whiz bang menu which logs their joblog to a PDF and
emails it to me.
But, in general, what commands should be that way?
And I am not willing to accept IBM defaults. For example, does the
general user population need access to EXPORTFS? "Hey, let's set up a
samba share of the root directory!" Then again, maybe it was only changed
this way on this lpar for some reason lost to time. Because it's not that
way on this other lpar that's newer and less modified.
But I digress...
If I do a Sys-Req 4 to see my messages do I need command line access to
DSPMSG?
If I do a Sys-Req 3 to see my job attributes do I need command line access
to DSPJOB?
If, after doing the Sys-Req 3, I take option 10 to look at the joblog do I
need command line access to DSPJOBLOG?
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate
link:
http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
http://amzn.to/2dEadiD
________________________________
CONFIDENTIALITY STATEMENT
________________________________
This electronic message transmission contains information from Superior Bulk Logistics, Inc. (Superior Carriers / Carry Transit) and is confidential and privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify us by telephone at (630) 573-2555 or by secure fax at (630) 573-2568 immediately. Thank you.
________________________________
midrange.com
