Re: Users with *ALLOBJ

Won’t authority collection tell you what the users actually need?

Collect on one of the users for a day and get your SQL going to empirically figure it out.


Jim Oberholtzer
Agile Technology Architects

On May 11, 2024, at 12:58 PM, ubelhor@xxxxxxxxxxxxx wrote:

Hello:
We are process of a task to get rid of *ALLOBJ authority for system users. Out of hundreds of profiles with *ALLOBJ we are down to 9 system users that have *ALLOBJ. They are in the finance group and insist they must have the *ALLOBJ authority. We are tackling the users 1 at a time out of the 9 to see what they actually need for authority and ultimately get the *ALLOBJ removed from their profiles. It was discovered that over the years by default user profiles had been copied and no one really considered the impact of *ALLOBJ.
We don't necessarily want to put in a package. Just want to deal with sorting out safely what the 9 system users really need for authority. They are using JDE World (green screen) and also have a bunch of add on applications. Do you have any recommendations on how to most efficiently address the task?
ThanksRegards,Laura
Laura A. UbelhorPresidentConsultech Services, Inc.www.consultechservicesinc.com
phone 248-701-7410
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.