Re: JBA and AS/400 User profiles

I agree with Mike.  Be very careful what authority you give users.
Very important is the line in AS/400 User Profile.
Limit capabilities . . . . . . .   *YES          *SAME, *NO, *PARTIAL, *YES
 *YES means they do not have command line access except to enter option
number.
JBA User Profile should have the follwing line set to 0 = NO.
Allow command entry . . . . . . 0       (1=Yes,0=No)

Barbara


----- Original Message -----
From: "Lemon, Mike" <MLemon@xxxxxxxxxxx>
To: "'System 21 Users'" <system21@xxxxxxxxxxxx>
Sent: Tuesday, August 02, 2005 3:42 PM
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles


> WOAH!!!!  I'm hoping Diana's response was a joke!
>
> *ALLOBJ is not required for QUSER.  Neither is group profile QPGMR
required
> for your users.
>
> We are at 3.51 and all of our users have always been given QUSER group
> profiles.  In addition, whatever profile you specify should **NOT** have
> *ALLOBJ authority as that would allow any user to delete any object on the
> system from a command line.  Oh, it would also mean that all users would
be
> able to recompile programs, execute any commands, etc.
>
> Our users are set to group profile QUSER.  No special authorities are
> assigned to QUSER or the user's profile.
>
> On our system, the profile QPGMR does have some special authorities
(*ALLOBJ
> being one of them).  I don't KNOW if it is necessary though.  Here is the
> complete list:
>
> *ALLOBJ
> *JOBCTL
> *SAVSYS
> *SPLCTL
>
> -Mike
>
>
>
> -----Original Message-----
> From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx]
> Sent: Tuesday, August 02, 2005 3:18 PM
> To: 'System 21 Users'
> Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
>
>
> You must set your users to group profile qpgmr and qpgmr must have *allobj
> for system 21 to execute.
>
> -----Original Message-----
> From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
> On Behalf Of Ram Hari
> Sent: Tuesday, August 02, 2005 3:06 PM
> To: 'System 21 Users'
> Subject: [SYSTEM21] JBA and AS/400 User profiles
>
>
>
> We are setting up all our users in JBA with QPGMR group profile. I need to
> know is that how you set your users too.
>
> Also can someone let me know how QPGMR user profile is set up in your
> system, Like what special authorities you have given to QPGMR. Should
QPGMR
> have *allobj authority because JBA uses this profile for its process.
>
> Your time and help is appreciated.
>
> Thanks
>
>
> Ram S. Hari
> Information Services
> Wasserstrom
> ramhari@xxxxxxxxxxxxxxx
> Voice 614.737.8542
> Fax    614.737.3275
>
>
> _______________________________________________
> This is the System 21 Users (SYSTEM21) mailing list To post a message
email:
> SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/system21
> or email: SYSTEM21-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> http://archive.midrange.com/system21.
>
>
>
> This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
>
>
>
>
>                                                 ARDEN
>                                            A Global Company
>   Celebrating over 40 years of making your life more comfortable!
>
> This message may contain confidential and/or privileged information.  If
you
> are not the adressee
> or authorized to receive this for the adressee, you must not use, copy,
> disclose, or take any action
> based on this message or any information herein.  If you have received
this
> message in error,
> please advise the sender immediately by reply e-mail and delete this
> message.
>
> This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
> Server.
>
> _______________________________________________
> This is the System 21 Users (SYSTEM21) mailing list
> To post a message email: SYSTEM21@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/system21
> or email: SYSTEM21-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/system21.
> _______________________________________________
> This is the System 21 Users (SYSTEM21) mailing list
> To post a message email: SYSTEM21@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/system21
> or email: SYSTEM21-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/system21.
>
>