John wrote on 05/27/2004 03:27:13 AM: > I given object authority *public = exclude for the object STRSQL. When a > user signon to as/400, the ERP application is loading (initial program) and > the user is able to excute the cmd STRSQL. If he signoff and go to main > menu, then it is not allowed. Can u tell me what is happening. The user has > no special authority It sounds to me like the ERP application, or something it uses, has a problem with adopted authority. That is, if the ERP application is displaying a command line that allows the user to run the STRSQL command then it sounds like the adopted authority is being propagated to the command line. To test this, I suggest that you ask the user to enter DSPOBJAUT STRSQL *CMD on that command line. If *ADOPTED is listed in the User column then the authority to the STRSQL command is coming from adopted authority. If *GROUP is displayed, then the authority is coming from one or more of their group profiles. Ed Fishel, edfishel@xxxxxxxxxx
As an Amazon Associate we earn from qualifying purchases.
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.