×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
These "functions" are an attempt to be "more granular" inside the OS where the map between special authorities could be too broad.
But I agree, if a user is explicitly marked with *SECOFR user class should be granted functionality.Then, depending on the complexity of the shop, one is free to subpartition the admin roles in different profiles as one wishes, keeping the QSECOFR e SST credentials in the vault....
On Tuesday, June 24, 2025 at 08:25:50 PM GMT+2, Rob Berendt <robertowenberendt@xxxxxxxxx> wrote:
Am I just being an angry bird by despising the proliferation of stuff
requiring WRKFCNUSG? For example
STR...
User QSECOFR not authorized to command STR...
Joblog contains a message like ".... You need to obtain permission from
your system administrator for function QIBM_..,_ADMIN"
CHGFCNUSG FCNID(QIBM_..._ADMIN) USER(QSECOFR) USAGE(*ALLOWED)
Now QSECOFR can use STR...
... is a redacted string so as not to draw attention to any one product but
focus overall on this WRKFCNUSG proliferation.
In my mind, if a shop is stupid enough to give *ALLOBJ to too many people
then they can easily enough do a CHGFCNUSG FCNID(QIBM_..._ADMIN)
ALLOBJAUT(*USED) and be done with it. Who are we to judge? All we're
doing is making them perform extra steps.
If everyone would use the same message id and I could simply trap that
message, read the data and automatically do a CHGFCNUSG I'd be tempted.
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
