RE: How to retrieve all user profiles in an IFS object's authority

If the program is running as *OWNER and the owner of the program has
*USE for the profile you are switching to (and also when you switch
back) then you can us *NOPWDCHK and not have to know the password.

Store the user profile currently running the job.
Call QSYGETPH with new user profile and *NOPWDCHK.
Call QWTSETP with the handle from QSYSGETPH
Do your work.
Call QSYSGETPH with the stored user profile and *NOPWDCHK.
Call QWTSETP with the new handle.

Spawn was just brought up as a way possibly create a sandbox around the
job elevating authority. Data queues were also mentioned.

Kevin Bucknum
Senior Programmer Analyst
MEDDATA/MEDTRON
Tel: 985-893-2550

-----Original Message-----

From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf
Of Dan
Sent: Tuesday, September 11, 2018 11:07 AM
To: Midrange Systems Technical Discussion
Subject: Re: How to retrieve all user profiles in an IFS object's

authority

Rob, Kevin,

Thanks for the great ideas!

I missed Rob's orginal mention of profile switching, but this was

something I

was considering. The spawn api is completely foreign to me and I

didn't see

anything in its documentation about switching profiles.

Utilizing the QSYGETPH and QWTSETP APIs in the application that

excutes the

CHGAUT commands is intriguing but two issues: 1) We would have to

store

the password in a manner that it would be secure and, I'm guessing,

use

adopted authority on the application that needs to retrieve it. 2)

How do you

revert back to the user's profile when done with the process that uses

the

switched-to profile?

Using a data queue is a possibility, but need to ensure that the

receiver

program is always active and running from a user profile with

sufficient

authorities.

- Dan
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD