Re: Remove special authority (Rob Berendt)

Actually, IBM provides a standard query for just such a thing.

-- category: IBM i Services
-- description: Security - Review *ALLOBJ users
--
-- Which users have *ALLOBJ authority either directly
-- or via a Group or Supplemental profile?
--
SELECT AUTHORIZATION_NAME, STATUS, NO_PASSWORD_INDICATOR, PREVIOUS_SIGNON,
TEXT_DESCRIPTION
FROM QSYS2.USER_INFO
WHERE SPECIAL_AUTHORITIES LIKE '%*ALLOBJ%' OR AUTHORIZATION_NAME IN
(SELECT USER_PROFILE_NAME
FROM
QSYS2.GROUP_PROFILE_ENTRIES
WHERE GROUP_PROFILE_NAME
IN (SELECT
AUTHORIZATION_NAME
FROM QSYS2.USER_INFO
WHERE
SPECIAL_AUTHORITIES LIKE '%*ALLOBJ%'))
ORDER BY AUTHORIZATION_NAME;

One really needs to toss STRSQL into the ash can and use "Run SQL
Scripts". Then use Edit, Insert from Examples.


Rob Berendt