RE: JBA and AS/400 User profiles

Don't know who told you that but I've set up System 21 for many customers 
and NEVER told anyone assigned to QPGMR and *ALLOBJ.    In general I told 
people to set up Group profiles for each area and attach the user profiles 
to those Groups.  User class is always a *USER and the only special 
authority is *JOBCTL.

All is takes is one person who knows a command or two and it's a Disaster 
waiting to happen.   "danger danger danger"  - Steve Erwin

Steven




"Diana Larsson" <dlarsson@xxxxxxxxxxxxxxxxxx> 
Sent by: system21-bounces+steven_fuller=pullmanind.com@xxxxxxxxxxxx
08/02/2005 03:48 PM
Please respond to
System 21 Users <system21@xxxxxxxxxxxx>


To
"'System 21 Users'" <system21@xxxxxxxxxxxx>
cc

Subject
RE: [SYSTEM21]   JBA and AS/400 User profiles






No it wasn't a joke, that what we were told to setup our users. 

-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Lemon, Mike
Sent: Tuesday, August 02, 2005 3:42 PM
To: 'System 21 Users'
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles

WOAH!!!!  I'm hoping Diana's response was a joke!

*ALLOBJ is not required for QUSER.  Neither is group profile QPGMR 
required
for your users.

We are at 3.51 and all of our users have always been given QUSER group
profiles.  In addition, whatever profile you specify should **NOT** have
*ALLOBJ authority as that would allow any user to delete any object on the
system from a command line.  Oh, it would also mean that all users would 
be
able to recompile programs, execute any commands, etc.

Our users are set to group profile QUSER.  No special authorities are
assigned to QUSER or the user's profile.

On our system, the profile QPGMR does have some special authorities 
(*ALLOBJ
being one of them).  I don't KNOW if it is necessary though.  Here is the
complete list:
 
                 *ALLOBJ
                 *JOBCTL
                 *SAVSYS
                 *SPLCTL

-Mike



-----Original Message-----
From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 02, 2005 3:18 PM
To: 'System 21 Users'
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles


You must set your users to group profile qpgmr and qpgmr must have *allobj
for system 21 to execute. 

-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Ram Hari
Sent: Tuesday, August 02, 2005 3:06 PM
To: 'System 21 Users'
Subject: [SYSTEM21] JBA and AS/400 User profiles



We are setting up all our users in JBA with QPGMR group profile. I need to
know is that how you set your users too.
 
Also can someone let me know how QPGMR user profile is set up in your
system, Like what special authorities you have given to QPGMR. Should 
QPGMR
have *allobj authority because JBA uses this profile for its process.

Your time and help is appreciated.

Thanks


Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax    614.737.3275


_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list To post a message 
email:
SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/system21.



This INBOUND E-mail and document(s) has been scanned by an Antivirus 
Server.




                                                ARDEN
                                           A Global Company
  Celebrating over 40 years of making your life more comfortable!

This message may contain confidential and/or privileged information.  If 
you
are not the adressee 
or authorized to receive this for the adressee, you must not use, copy,
disclose, or take any action 
based on this message or any information herein.  If you have received 
this
message in error, 
please advise the sender immediately by reply e-mail and delete this
message.

This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
Server.

_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.



This INBOUND E-mail and document(s) has been scanned by an Antivirus 
Server.




                                                ARDEN
                                           A Global Company
  Celebrating over 40 years of making your life more comfortable!

This message may contain confidential and/or privileged information.  If 
you are not the adressee 
or authorized to receive this for the adressee, you must not use, copy, 
disclose, or take any action 
based on this message or any information herein.  If you have received 
this message in error, 
please advise the sender immediately by reply e-mail and delete this 
message.

This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus 
Server.

_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.