Re: Under what user profile does the startup program run, in an IPL?

Giving QPGMR *ALLOBJ is usually a very bad security risk, and I would never recommend it.

That’s a shortcut to solving a problem best done by my suggestion or modifying the start up process.

Another way to do it is to build the startup program and have the owner of that program have the authority and run it with adopted authority, not my favorite method but it’s done that way as well.

Jim Oberholtzer
Agile Technology Architects

On Apr 26, 2021, at 4:01 PM, James H. H. Lampert <jamesl@xxxxxxxxxxxxxxxxx> wrote:

On 4/26/21 1:40 PM, Jim Oberholtzer wrote:

Usually it’s QPGMR. That’s set up in the prestart job in QCTL that
runs the startup job.

Ok. That makes sense. I randomly checked a few customers, and found out they all run their startup as QPGMR. But I also noticed that on the customers I looked at, QPGMR has *ALLOBJ.

I'm assuming that's the default, as well.

Our "problem" customer seems to be an exception. Not an exception to the startup program running under QPGMR, but rether, their QPGMR appears to lack *ALLOBJ authority.

--
JHHL
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com