I get this crappy message with 7.5 whenever I try to edit WRKCTLGBRM entries.
BRM4041
Message . . . . : Access denied for user ROB.
Cause . . . . . : Access is denied for the specific item TUE_SUNEDD. The
specific item TUE_SUNEDD was defined to the system by BRMS as 'The specific
control group can be secured from changes'.
Recovery . . . : To obtain access to the specific item, have the security
administrator change the user's usage setting for this function.
Technical description . . . . . . . . : The function
QIBM_Q1A_BKU_CTLG_TUE_SUNEDD was registered with the system to control usage
to the specific TUE_SUNEDD. To change usage of this function you must use
the BRMS graphical user interface. To navigate to Backup Recovery and Medi
Services functions, click on the system name, click on the Configure
Application Administration task, or choose File and click on Application
Administration. Open the Backup Recovery and Media Services folder listed
under the Host Applications tab.
Apparently it creates new function's for each control group you define. The control group name is imbedded in the function name.
Perhaps the graphical interface allows you to change 'The specific control group can be secured from changes'. I cannot find that on the text based interface.
I wonder if 7.5 defaults to setting new control groups, etc to 'The specific control group can be secured from changes'.
There's a lot of things IBM changed in BRMS with the intent of making it more secure but actually makes it less secure. I've pointed this out to them and parts are going to be redesigned.
I've also found that WRKFCNUSG allows you to change this for now.
But the --->>> REAL <<<--- answer is this:
SETUSRBRM USER(ROB) USAGE(*ADMIN)
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 7310 Innovation Blvd, Suite 104
Ft. Wayne, IN 46818
Ship to: 7310 Innovation Blvd, Dock 9C
Ft. Wayne, IN 46818
http://www.dekko.com
midrange.com
