Re: Mass revocation of authority

[Glenn Gundermann <glenn.gundermann@xxxxxxxxx>]

Hi Bill,

This code came from Scott Forstie from IBM.
It does a CHGUSRPRF and disables the profile.
You can modify it for the parameters you want to change.
Set preview to yes to see who will be changed.  Set it to no to actually do
the update.


select cp.* from QSYS2.USER_INFO,
       table (
         SYSTOOLS.CHANGE_USER_PROFILE(
           P_USER_NAME => AUTHORIZATION_NAME, P_STATUS => '*DISABLED',
PREVIEW => 'YES'
         )
       ) cp
  where STATUS = '*ENABLED' and
        user_creator <> '*IBM' and
        USER_DEFAULT_PASSWORD = 'YES';


Yours truly,

Glenn Gundermann
Email: glenn.gundermann@xxxxxxxxx
Cell: (416) 317-3144



On Mon, 9 Dec 2024 at 13:35, Bill and Lisa Howie <blhowie66@xxxxxxxxxxx>
wrote:

> Hello all,
>
> We’re doing a comprehensive security review on our IBM I system and we’re
> looking at removing the JOBCTL and SPLCTL authority for a large list of
> users.  I’m working on trying to do this programmatically, and I thought I
> had an idea on it but I’ve run into a brick wall.  Anyone every done this
> and willing to share how?  Any info would be much appreciated.
>
> Bill
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.