Re: Authority on Java calls

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

Hi Scott

I'll have to dig back through some emails - will get back on this.

Vern

On 10/8/2013 4:50 PM, Scott Klement wrote:
> I've heard Carol Woodbury recommend doing a setgid instead of swapping
> profiles...  that way, if your job should crash or something before
> swapping back, there's a much lower risk.  You're just running with a
> different group id, that's all.
>
> I'm surprised when you say that changing the effective UID would be less
> intensive vs. swapping profiles.  I would've thought these would do
> exactly the same thing under the covers?   Changing group, yeah, I can
> see that being less intensive, but...  changing uid?  Is that true?  Is
> it really less resource intensive?
>
> On 10/8/2013 3:31 PM, Vernon Hamberg wrote:
> > To the swapped-profile idea - I think it was an ISV support person at
> > IBM who said to change the effective GID or UID of a job - this is just
> > like swapping profiles, just less intensive. This is done with one or
> > the other API, qsyseteuid or qsysetegid.
> >
> > HTH
> > Vern