[Security400] Authority annoyances, continued...

["Bale, Dan" <D.Bale@xxxxxxxxxxxxx>]

Here's a situation I find myself in on a regular basis.  My current task
has been getting the backups up to snuff.  In my backup app, I am
running commands that require more authorities than what the typical
user has.  I have a five-hour window for my backups.  Five of our
systems are at remote locations.  If the backup app stops for a "user
doesn't have required authority" message that I did not anticipate, I'm
screwed because the nightly FTP of orders from the mainframe can't start
until after the backup finishes.  This has a big impact on our
warehouses when they can't begin processing orders first thing in the
morning.  I've gotten hammered once for this and don't intend to go
through it again.

Thinking this through just a bit...  I wonder if there's a way to "test"
a program object (or its source code?) before executing it to see if a
given user has all the necessary authorities to run it from start to
finish.  Has anybody written this utility?

- Dan
Dan Bale says "BAN DALE!"
IT - AS/400
Handleman Company
248-362-4400  Ext. 4952
D.Bale@Handleman.com
  Quiquid latine dictum sit altum viditur.
  (Whatever is said in Latin seems profound.)