Re: [Security400] Authority annoyances, continued...

[Anton Gombkötö <gombkoetoe@xxxxxxxxxx>]

--
[ Picked text/plain from multipart/alternative ]
Hi Dan!

In those programs, where i need to do something that the average user might
not be entitled and so not be authorized to, i do a
CHKOBJ OBJ(powercommand) OBJTYPE(*CMD) AUT(*USE)  for all the mighty
commands first, before i do anything else. All commands, so also those
running hours later! So if it's going to fail, it fails in the second of
the call, not in the middle of the night. (at least for this reason ;-)

In those programs and situations, where it is possible to run programs with
USRPRF(*OWNER) and the owner of the program is a mighty user, i use this
approach. So even an under-privileged user can do things that he isn't
authorized to. But my program is and he is allowed to run my program.

I think this approach could cure many of your headaches...

(ad Ban Dale: You can't imagine what people do with my surname
"Gombkötö"....  ;-)



Mit freundlichen Grüssen / best regards

Anton Gombkötö

Avenum Technologie GmbH
Wien - Mattsee - Stuttgart
e-mail Office   :       mailto:Anton.Gombkoetoe@avenum.com
Homepage        :       http://www.avenum.com

Lest das Redbook / read the redbook "Who knew you could do that with RPG?":
http://www.redbooks.ibm.com/abstracts/sg245402.html
--