You can stop them from being able to enter it on a command line, but if they have a menu option that can run it, you would need to revoke authority to the command itself. That has long been the way to customize what options can be used on the System Request menu.
Mark Clanton
-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Rob Berendt
Sent: Monday, October 30, 2017 9:53 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Subject: Re: What commands should have ALWLMTUSR(*YES)?
Why would I have to do that? I don't want them to have DSPMSG in a program to blow up. I only want to stop it from a command line.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: Peter Dow <petercdow@xxxxxxxxx>
To: midrange-l@xxxxxxxxxxxx
Date: 10/26/2017 05:34 PM
Subject: Re: What commands should have ALWLMTUSR(*YES)?
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>
Hi Rob,
To disprove what Mark said, you need to change authority on the DSPMSG
command to DUMMY *EXCLUDE, then try it.
--
*Peter Dow* /
Dow Software Services, Inc.
909 793-9050
petercdow@xxxxxxxxx <mailto:petercdow@xxxxxxxxx>
pdow@xxxxxxxxxxxxxx <mailto:pdow@xxxxxxxxxxxxxx> /
On 10/26/2017 1:07 PM, Rob Berendt wrote:
I do not think you do. Read my message again. Or let me explain below
CHGCMD QSYS/SNDMSG ALWLMTUSR(*NO)
Command SNDMSG in library QSYS changed.
CHGCMD QSYS/DSPMSG ALWLMTUSR(*NO)
Command DSPMSG in library QSYS changed.
CHGCMD QSYS/DSPJOB ALWLMTUSR(*NO)
Command DSPJOB in library QSYS changed.
CHGCMD QSYS/DSPJOBLOG ALWLMTUSR(*NO)
Command DSPJOBLOG in library QSYS changed.
CRTUSRPRF DUMMY LMTCPB(*YES)
Special authorities granted *NONE.
User profile DUMMY created.
Sign on as DUMMY
From the real command line
DSPMSG
Command DSPMSG in library *LIBL not allowed.
SysReq 4, Messages for: DUMMY screen appears.
SysReq 6, Messages for QSYSOPR screen appears.
SysReq 3, DSPJOB screen appears, and, 10. Display job log works just
fine.
SysReq 5, SNDMSG screen appears, and I sent a message.
ROB sees:
From . . . : DUMMY 10/26/17 16:07:01
hi dude
Rob Berendt
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related
questions.
Help support midrange.com by shopping at amazon.com with our affiliate
link:
http://amzn.to/2dEadiD
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
https://archive.midrange.com/midrange-l.
Please contact support@xxxxxxxxxxxx for any subscription related questions.
Help support midrange.com by shopping at amazon.com with our affiliate link:
http://amzn.to/2dEadiD
________________________________
CONFIDENTIALITY STATEMENT
________________________________
This electronic message transmission contains information from Superior Bulk Logistics, Inc. (Superior Carriers / Carry Transit) and is confidential and privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify us by telephone at (630) 573-2555 or by secure fax at (630) 573-2568 immediately. Thank you.
________________________________
midrange.com
