Re: Authority on Java calls

[Scott Klement <rpg400-l@xxxxxxxxxxxxxxxx>]

I've heard Carol Woodbury recommend doing a setgid instead of swapping 
profiles...  that way, if your job should crash or something before 
swapping back, there's a much lower risk.  You're just running with a 
different group id, that's all.

I'm surprised when you say that changing the effective UID would be less 
intensive vs. swapping profiles.  I would've thought these would do 
exactly the same thing under the covers?   Changing group, yeah, I can 
see that being less intensive, but...  changing uid?  Is that true?  Is 
it really less resource intensive?

On 10/8/2013 3:31 PM, Vernon Hamberg wrote:
> To the swapped-profile idea - I think it was an ISV support person at
> IBM who said to change the effective GID or UID of a job - this is just
> like swapping profiles, just less intensive. This is done with one or
> the other API, qsyseteuid or qsysetegid.
>
> HTH
> Vern