Re: Users with *ALLOBJ

They think that they do because of an application that creates temporary work files that are used by multiple users and also because they need to transfer files from the IBM i to the network or their desktop.   Our thought is to work on the access 1 user at a time until we are through the 9 users left with *ALLOBJ.   They have a concern if we take the authority away something will be messed up that can't be recreated but think likely once we have success working with getting all working for 1 system user we will have a better idea.   We were considering using the security audit journal to gather information but I'm thinking instead we just take away the authority and address as needed.
Regards,Laura
Laura A. UbelhorPresidentConsultech Services, Inc.www.consultechservicesinc.com
phone 248-701-7410

On Sunday, May 12, 2024 at 12:19:08 AM EDT, Roger Harman <roger.harman@xxxxxxxxxxx> wrote:

My first thought was...  Why do the *users* know, or think they know, that they need *ALLOBJ authority?

That's kind of getting into the weeds for end-users.

Roger Harman
COMMON Certified Application Developer - ILE RPG on IBM i on Power




-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Chris Pando
Sent: Saturday, May 11, 2024 12:46 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: Users with *ALLOBJ

A little dated, but then so is World. Synopsis of a COMMON session I did in
Baltimore some twenty plus years ago.

http://brilligware.com/remirpces.html

JDEdwards World and object level security. I took a number of clients from
SECLVL 20 to 40 using this.

Chris

On Sat, May 11, 2024, 12:58 PM ubelhor@xxxxxxxxxxxxx <ubelhor@xxxxxxxxxxxxx>
wrote:

Hello:
We are process of a task to get rid of *ALLOBJ authority for system
users.  Out of hundreds of profiles with *ALLOBJ we are down to 9 system
users that have *ALLOBJ.  They are in the finance group and insist they
must have the *ALLOBJ authority.    We are tackling the users 1 at a time
out of the 9 to see what they actually need for authority and ultimately
get the *ALLOBJ removed from their profiles.  It was discovered that over
the years by default user profiles had been copied and no one really
considered the impact of *ALLOBJ.
We don't necessarily want to put in a package.  Just want to deal with
sorting out safely what the 9 system users really need for authority.
  They are using JDE World (green screen) and also have a bunch of add on
applications.  Do you have any recommendations on how to  most efficiently
address the task?
ThanksRegards,Laura
Laura A. UbelhorPresidentConsultech Services,
Inc.http://www.consultechservicesinc.com/
phone 248-701-7410
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.