|
I also agree with Mike and Barbara, you should be very careful setting up
users. It is not necessary for System 21 users to be defined in QPGMR
group, because QPGMR is much stronger profile than a simple user need to
be. Barbara is quit right that all user should be defined in system 21
with no command line authority, except some users who really need to run
commands like (RUNQRY) and they have enough understanding with AS400
commands and can be trusted to use them.
We have defined all our users with a group profile (our own created) to
control authorities on different libraries with authority lists. None of
our users (except programmers) has any special authority, or defined with
QPGMR group.
Its working great, and we have no authority/security problem at all.
Dawer Khan
System Analyst/Programmer
Information Technology
SciCan
P: (416) 446-4511
F: (416) 445-2727
system21-request@xxxxxxxxxxxx
Sent by: system21-bounces@xxxxxxxxxxxx
08/02/2005 03:56 PM
Please respond to
system21@xxxxxxxxxxxx
To
system21@xxxxxxxxxxxx
cc
Subject
SYSTEM21 Digest, Vol 3, Issue 106
Send SYSTEM21 mailing list submissions to
system21@xxxxxxxxxxxx
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.midrange.com/mailman/listinfo/system21
or, via email, send a message with subject or body 'help' to
system21-request@xxxxxxxxxxxx
You can reach the person managing the list at
system21-owner@xxxxxxxxxxxx
When replying, please edit your Subject line so it is more specific
than "Re: Contents of SYSTEM21 digest..."
Today's Topics:
1. Advanced Planning System (APS) to System21 (Jose Ignacio Betancur)
2. JBA and AS/400 User profiles (Ram Hari)
3. RE: JBA and AS/400 User profiles (Diana Larsson)
4. RE: JBA and AS/400 User profiles (Lemon, Mike)
5. RE: JBA and AS/400 User profiles (Ram Hari)
6. RE: JBA and AS/400 User profiles (Diana Larsson)
7. RE: Advanced Planning System (APS) to System21 (Roy Luce)
8. Re: JBA and AS/400 User profiles (Barbara Byrne)
----------------------------------------------------------------------
message: 1
date: Tue, 2 Aug 2005 13:48:15 -0500
from: "Jose Ignacio Betancur" <jbetancur@xxxxxxxxxxxxxxx>
subject: [SYSTEM21] Advanced Planning System (APS) to System21
Hi everybody,
Somebody has experience with some APS solution integrated to System21
manufacturing modules, could you give the brand and some idea about the
complexity to integration with System21, Some about your experience with
this issue.
Thank in advance
------------------------------
message: 2
date: Tue, 2 Aug 2005 15:05:33 -0400
from: Ram Hari <RamHari@xxxxxxxxxxxxxxx>
subject: [SYSTEM21] JBA and AS/400 User profiles
We are setting up all our users in JBA with QPGMR group profile. I need to
know is that how you set your users too.
Also can someone let me know how QPGMR user profile is set up in your
system, Like what special authorities you have given to QPGMR.
Should QPGMR have *allobj authority because JBA uses this profile for its
process.
Your time and help is appreciated.
Thanks
Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax 614.737.3275
------------------------------
message: 3
date: Tue, 2 Aug 2005 15:18:08 -0400
from: "Diana Larsson" <dlarsson@xxxxxxxxxxxxxxxxxx>
subject: RE: [SYSTEM21] JBA and AS/400 User profiles
You must set your users to group profile qpgmr and qpgmr must have *allobj
for system 21 to execute.
-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Ram Hari
Sent: Tuesday, August 02, 2005 3:06 PM
To: 'System 21 Users'
Subject: [SYSTEM21] JBA and AS/400 User profiles
We are setting up all our users in JBA with QPGMR group profile. I need to
know is that how you set your users too.
Also can someone let me know how QPGMR user profile is set up in your
system, Like what special authorities you have given to QPGMR.
Should QPGMR have *allobj authority because JBA uses this profile for its
process.
Your time and help is appreciated.
Thanks
Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax 614.737.3275
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list To post a message
email:
SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/system21.
This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
ARDEN
A Global Company
Celebrating over 40 years of making your life more comfortable!
This message may contain confidential and/or privileged information. If
you are not the adressee
or authorized to receive this for the adressee, you must not use, copy,
disclose, or take any action
based on this message or any information herein. If you have received
this message in error,
please advise the sender immediately by reply e-mail and delete this
message.
This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
Server.
------------------------------
message: 4
date: Tue, 2 Aug 2005 15:42:16 -0400
from: "Lemon, Mike" <MLemon@xxxxxxxxxxx>
subject: RE: [SYSTEM21] JBA and AS/400 User profiles
WOAH!!!! I'm hoping Diana's response was a joke!
*ALLOBJ is not required for QUSER. Neither is group profile QPGMR
required
for your users.
We are at 3.51 and all of our users have always been given QUSER group
profiles. In addition, whatever profile you specify should **NOT** have
*ALLOBJ authority as that would allow any user to delete any object on the
system from a command line. Oh, it would also mean that all users would
be
able to recompile programs, execute any commands, etc.
Our users are set to group profile QUSER. No special authorities are
assigned to QUSER or the user's profile.
On our system, the profile QPGMR does have some special authorities
(*ALLOBJ
being one of them). I don't KNOW if it is necessary though. Here is the
complete list:
*ALLOBJ
*JOBCTL
*SAVSYS
*SPLCTL
-Mike
-----Original Message-----
From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 02, 2005 3:18 PM
To: 'System 21 Users'
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
You must set your users to group profile qpgmr and qpgmr must have *allobj
for system 21 to execute.
-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Ram Hari
Sent: Tuesday, August 02, 2005 3:06 PM
To: 'System 21 Users'
Subject: [SYSTEM21] JBA and AS/400 User profiles
We are setting up all our users in JBA with QPGMR group profile. I need to
know is that how you set your users too.
Also can someone let me know how QPGMR user profile is set up in your
system, Like what special authorities you have given to QPGMR. Should
QPGMR
have *allobj authority because JBA uses this profile for its process.
Your time and help is appreciated.
Thanks
Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax 614.737.3275
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list To post a message
email:
SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/system21.
This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
ARDEN
A Global Company
Celebrating over 40 years of making your life more comfortable!
This message may contain confidential and/or privileged information. If
you
are not the adressee
or authorized to receive this for the adressee, you must not use, copy,
disclose, or take any action
based on this message or any information herein. If you have received
this
message in error,
please advise the sender immediately by reply e-mail and delete this
message.
This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
Server.
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
------------------------------
message: 5
date: Tue, 2 Aug 2005 15:26:38 -0400
from: Ram Hari <RamHari@xxxxxxxxxxxxxxx>
subject: RE: [SYSTEM21] JBA and AS/400 User profiles
This is exactly why I am asking this question. I have some users that run
AS/400 queries from command line. These users then have almost all
authorities as a SECOFR.
Please let me know
Thanks
Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax 614.737.3275
-----Original Message-----
From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 02, 2005 3:18 PM
To: 'System 21 Users'
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
You must set your users to group profile qpgmr and qpgmr must have *allobj
for system 21 to execute.
-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Ram Hari
Sent: Tuesday, August 02, 2005 3:06 PM
To: 'System 21 Users'
Subject: [SYSTEM21] JBA and AS/400 User profiles
We are setting up all our users in JBA with QPGMR group profile. I need to
know is that how you set your users too.
Also can someone let me know how QPGMR user profile is set up in your
system, Like what special authorities you have given to QPGMR.
Should QPGMR have *allobj authority because JBA uses this profile for its
process.
Your time and help is appreciated.
Thanks
Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax 614.737.3275
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list To post a message
email:
SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/system21.
This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
ARDEN
A Global Company
Celebrating over 40 years of making your life more comfortable!
This message may contain confidential and/or privileged information. If
you
are not the adressee
or authorized to receive this for the adressee, you must not use, copy,
disclose, or take any action
based on this message or any information herein. If you have received
this
message in error,
please advise the sender immediately by reply e-mail and delete this
message.
This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
Server.
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
__________________________________________________________
Message transport security by GatewayDefender.com
3:18:24 PM ET - 8/2/2005
------------------------------
message: 6
date: Tue, 2 Aug 2005 15:48:33 -0400
from: "Diana Larsson" <dlarsson@xxxxxxxxxxxxxxxxxx>
subject: RE: [SYSTEM21] JBA and AS/400 User profiles
No it wasn't a joke, that what we were told to setup our users.
-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Lemon, Mike
Sent: Tuesday, August 02, 2005 3:42 PM
To: 'System 21 Users'
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
WOAH!!!! I'm hoping Diana's response was a joke!
*ALLOBJ is not required for QUSER. Neither is group profile QPGMR
required
for your users.
We are at 3.51 and all of our users have always been given QUSER group
profiles. In addition, whatever profile you specify should **NOT** have
*ALLOBJ authority as that would allow any user to delete any object on the
system from a command line. Oh, it would also mean that all users would
be
able to recompile programs, execute any commands, etc.
Our users are set to group profile QUSER. No special authorities are
assigned to QUSER or the user's profile.
On our system, the profile QPGMR does have some special authorities
(*ALLOBJ
being one of them). I don't KNOW if it is necessary though. Here is the
complete list:
*ALLOBJ
*JOBCTL
*SAVSYS
*SPLCTL
-Mike
-----Original Message-----
From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, August 02, 2005 3:18 PM
To: 'System 21 Users'
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
You must set your users to group profile qpgmr and qpgmr must have *allobj
for system 21 to execute.
-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]
On Behalf Of Ram Hari
Sent: Tuesday, August 02, 2005 3:06 PM
To: 'System 21 Users'
Subject: [SYSTEM21] JBA and AS/400 User profiles
We are setting up all our users in JBA with QPGMR group profile. I need to
know is that how you set your users too.
Also can someone let me know how QPGMR user profile is set up in your
system, Like what special authorities you have given to QPGMR. Should
QPGMR
have *allobj authority because JBA uses this profile for its process.
Your time and help is appreciated.
Thanks
Ram S. Hari
Information Services
Wasserstrom
ramhari@xxxxxxxxxxxxxxx
Voice 614.737.8542
Fax 614.737.3275
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list To post a message
email:
SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/system21.
This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
ARDEN
A Global Company
Celebrating over 40 years of making your life more comfortable!
This message may contain confidential and/or privileged information. If
you
are not the adressee
or authorized to receive this for the adressee, you must not use, copy,
disclose, or take any action
based on this message or any information herein. If you have received
this
message in error,
please advise the sender immediately by reply e-mail and delete this
message.
This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
Server.
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
ARDEN
A Global Company
Celebrating over 40 years of making your life more comfortable!
This message may contain confidential and/or privileged information. If
you are not the adressee
or authorized to receive this for the adressee, you must not use, copy,
disclose, or take any action
based on this message or any information herein. If you have received
this message in error,
please advise the sender immediately by reply e-mail and delete this
message.
This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
Server.
------------------------------
message: 7
date: Tue, 2 Aug 2005 14:54:52 -0500
from: "Roy Luce" <lwl@xxxxxxxxxxxxx>
subject: RE: [SYSTEM21] Advanced Planning System (APS) to System21
To the list.
No direct experience but I have a client who spent $1.5 million US to
implement an APS system. After 5 years of planning and implementing they
abandoned the effort. The biggest issue was trying to keep the business
rules current. Unfortunately their rules changed every day but took
several
days to implement. The end result was they could never trust the results.
In place of the APS they implemented a Rapid Priority Management system.
For more on rapid priority management see the RPM section of Carol Ptak's
book "ERP, Tools, Techniques and Applications for integrating the Supply
Chain - 2nd Edition" published by St. Lucie Press. The RPM discussion
starts on page 188.
And yes I am a representative of a Rapid Priority Management system.
For more contact me off line.
Roy Luce
Main: 847-540-9635
Cell: 847-910-0884
Fax: 847-620-2799 *new*
Email: lwl@xxxxxxxxxxxxx
-----Original Message-----
From: system21-bounces@xxxxxxxxxxxx
[mailto:system21-bounces@xxxxxxxxxxxx]On
Behalf Of Jose Ignacio Betancur
Sent: Tuesday, August 02, 2005 1:48 PM
To: System 21 Users
Subject: [SYSTEM21] Advanced Planning System (APS) to System21
Hi everybody,
Somebody has experience with some APS solution integrated to System21
manufacturing modules, could you give the brand and some idea about the
complexity to integration with System21, Some about your experience with
this issue.
Thank in advance
_______________________________________________
This is the System 21 Users (SYSTEM21) mailing list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
------------------------------
message: 8
date: Tue, 2 Aug 2005 15:58:06 -0400
from: "Barbara Byrne" <bbyrne@xxxxxxxxxxx>
subject: Re: [SYSTEM21] JBA and AS/400 User profiles
I agree with Mike. Be very careful what authority you give users.
Very important is the line in AS/400 User Profile.
Limit capabilities . . . . . . . *YES *SAME, *NO, *PARTIAL,
*YES
*YES means they do not have command line access except to enter option
number.
JBA User Profile should have the follwing line set to 0 = NO.
Allow command entry . . . . . . 0 (1=Yes,0=No)
Barbara
----- Original Message -----
From: "Lemon, Mike" <MLemon@xxxxxxxxxxx>
To: "'System 21 Users'" <system21@xxxxxxxxxxxx>
Sent: Tuesday, August 02, 2005 3:42 PM
Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
> WOAH!!!! I'm hoping Diana's response was a joke!
>
> *ALLOBJ is not required for QUSER. Neither is group profile QPGMR
required
> for your users.
>
> We are at 3.51 and all of our users have always been given QUSER group
> profiles. In addition, whatever profile you specify should **NOT** have
> *ALLOBJ authority as that would allow any user to delete any object on
the
> system from a command line. Oh, it would also mean that all users would
be
> able to recompile programs, execute any commands, etc.
>
> Our users are set to group profile QUSER. No special authorities are
> assigned to QUSER or the user's profile.
>
> On our system, the profile QPGMR does have some special authorities
(*ALLOBJ
> being one of them). I don't KNOW if it is necessary though. Here is
the
> complete list:
>
> *ALLOBJ
> *JOBCTL
> *SAVSYS
> *SPLCTL
>
> -Mike
>
>
>
> -----Original Message-----
> From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx]
> Sent: Tuesday, August 02, 2005 3:18 PM
> To: 'System 21 Users'
> Subject: RE: [SYSTEM21] JBA and AS/400 User profiles
>
>
> You must set your users to group profile qpgmr and qpgmr must have
*allobj
> for system 21 to execute.
>
> -----Original Message-----
> From: system21-bounces@xxxxxxxxxxxx
[mailto:system21-bounces@xxxxxxxxxxxx]
> On Behalf Of Ram Hari
> Sent: Tuesday, August 02, 2005 3:06 PM
> To: 'System 21 Users'
> Subject: [SYSTEM21] JBA and AS/400 User profiles
>
>
>
> We are setting up all our users in JBA with QPGMR group profile. I need
to
> know is that how you set your users too.
>
> Also can someone let me know how QPGMR user profile is set up in your
> system, Like what special authorities you have given to QPGMR. Should
QPGMR
> have *allobj authority because JBA uses this profile for its process.
>
> Your time and help is appreciated.
>
> Thanks
>
>
> Ram S. Hari
> Information Services
> Wasserstrom
> ramhari@xxxxxxxxxxxxxxx
> Voice 614.737.8542
> Fax 614.737.3275
>
>
> _______________________________________________
> This is the System 21 Users (SYSTEM21) mailing list To post a message
email:
> SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/system21
> or email: SYSTEM21-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> http://archive.midrange.com/system21.
>
>
>
> This INBOUND E-mail and document(s) has been scanned by an Antivirus
Server.
>
>
>
>
> ARDEN
> A Global Company
> Celebrating over 40 years of making your life more comfortable!
>
> This message may contain confidential and/or privileged information. If
you
> are not the adressee
> or authorized to receive this for the adressee, you must not use, copy,
> disclose, or take any action
> based on this message or any information herein. If you have received
this
> message in error,
> please advise the sender immediately by reply e-mail and delete this
> message.
>
> This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus
> Server.
>
> _______________________________________________
> This is the System 21 Users (SYSTEM21) mailing list
> To post a message email: SYSTEM21@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/system21
> or email: SYSTEM21-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/system21.
> _______________________________________________
> This is the System 21 Users (SYSTEM21) mailing list
> To post a message email: SYSTEM21@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/system21
> or email: SYSTEM21-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/system21.
>
>
------------------------------
_______________________________________________
This is the System 21 Users (SYSTEM21) digest list
To post a message email: SYSTEM21@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/system21
or email: SYSTEM21-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/system21.
End of SYSTEM21 Digest, Vol 3, Issue 106
****************************************
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2025 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.