Re: Commands for Limited Users

LMTCPB(*YES) minimizes command line usage. Not having a >command line

available on your user screens gets rid of >this problem completely.

A correction, if you please.  Not having a command line on your user
screens does not get rid of this problem completely.

A LMTCPB(*YES) user can still run the afore mentioned commands through
an ftp client (example: quote rcmd sndmsg helloworld qsysopr), and both
limited and non limited capability users can still submit any command to
the operating system using the RMTCMD feature of iSeries Access
(example: rmtcmd crtlib inventory) and the sbmrmtcmd feature of DDM. In
these last two cases, the only limitation is the users authority to the
command itself (and most OS/400 commands are shipped with *PUBLIC *USE).

Properly tuned and executed exit programs can allow you to monitor and
prevent commands submitted trough interfaces such as ftp, ddm, and
rmtcmd irrespective of the users LMTCPB parameter value.


jte


--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxx
www.powertech.com 
Celebrating our 10th Anniversary Year!
 

 
This email message and any attachments are intended only for the use of
the intended recipients and may contain information that is privileged
and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message, or by telephone, and delete
the message from your email system.
--