I abhor supplemental groups.  Had a couple of problems with that:

1)  Someone started assigning a 'owner' profile as a supplemental group 
profile.  This 'owner' profile had the special authority of *ALLOBJ.  Thus 
all the users with this supplemental group had *ALLOBJ.
Cardinal rule #1-'Owner' profiles should not have any special authorities.

2)  Supplemental groups significantly increase the length of your SAVSYS. 
Increased ours from 4 minutes to 44 minutes.

3)  There is a limit to how many supplemental groups one user may be 
assigned to.  We were actually hitting this.

Better to use authorization lists wisely.

Rob Berendt
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755

As an Amazon Associate we earn from qualifying purchases.

This thread ...


Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2022 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.