|
I also agree with Mike and Barbara, you should be very careful setting up users. It is not necessary for System 21 users to be defined in QPGMR group, because QPGMR is much stronger profile than a simple user need to be. Barbara is quit right that all user should be defined in system 21 with no command line authority, except some users who really need to run commands like (RUNQRY) and they have enough understanding with AS400 commands and can be trusted to use them. We have defined all our users with a group profile (our own created) to control authorities on different libraries with authority lists. None of our users (except programmers) has any special authority, or defined with QPGMR group. Its working great, and we have no authority/security problem at all. Dawer Khan System Analyst/Programmer Information Technology SciCan P: (416) 446-4511 F: (416) 445-2727 system21-request@xxxxxxxxxxxx Sent by: system21-bounces@xxxxxxxxxxxx 08/02/2005 03:56 PM Please respond to system21@xxxxxxxxxxxx To system21@xxxxxxxxxxxx cc Subject SYSTEM21 Digest, Vol 3, Issue 106 Send SYSTEM21 mailing list submissions to system21@xxxxxxxxxxxx To subscribe or unsubscribe via the World Wide Web, visit http://lists.midrange.com/mailman/listinfo/system21 or, via email, send a message with subject or body 'help' to system21-request@xxxxxxxxxxxx You can reach the person managing the list at system21-owner@xxxxxxxxxxxx When replying, please edit your Subject line so it is more specific than "Re: Contents of SYSTEM21 digest..." Today's Topics: 1. Advanced Planning System (APS) to System21 (Jose Ignacio Betancur) 2. JBA and AS/400 User profiles (Ram Hari) 3. RE: JBA and AS/400 User profiles (Diana Larsson) 4. RE: JBA and AS/400 User profiles (Lemon, Mike) 5. RE: JBA and AS/400 User profiles (Ram Hari) 6. RE: JBA and AS/400 User profiles (Diana Larsson) 7. RE: Advanced Planning System (APS) to System21 (Roy Luce) 8. Re: JBA and AS/400 User profiles (Barbara Byrne) ---------------------------------------------------------------------- message: 1 date: Tue, 2 Aug 2005 13:48:15 -0500 from: "Jose Ignacio Betancur" <jbetancur@xxxxxxxxxxxxxxx> subject: [SYSTEM21] Advanced Planning System (APS) to System21 Hi everybody, Somebody has experience with some APS solution integrated to System21 manufacturing modules, could you give the brand and some idea about the complexity to integration with System21, Some about your experience with this issue. Thank in advance ------------------------------ message: 2 date: Tue, 2 Aug 2005 15:05:33 -0400 from: Ram Hari <RamHari@xxxxxxxxxxxxxxx> subject: [SYSTEM21] JBA and AS/400 User profiles We are setting up all our users in JBA with QPGMR group profile. I need to know is that how you set your users too. Also can someone let me know how QPGMR user profile is set up in your system, Like what special authorities you have given to QPGMR. Should QPGMR have *allobj authority because JBA uses this profile for its process. Your time and help is appreciated. Thanks Ram S. Hari Information Services Wasserstrom ramhari@xxxxxxxxxxxxxxx Voice 614.737.8542 Fax 614.737.3275 ------------------------------ message: 3 date: Tue, 2 Aug 2005 15:18:08 -0400 from: "Diana Larsson" <dlarsson@xxxxxxxxxxxxxxxxxx> subject: RE: [SYSTEM21] JBA and AS/400 User profiles You must set your users to group profile qpgmr and qpgmr must have *allobj for system 21 to execute. -----Original Message----- From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx] On Behalf Of Ram Hari Sent: Tuesday, August 02, 2005 3:06 PM To: 'System 21 Users' Subject: [SYSTEM21] JBA and AS/400 User profiles We are setting up all our users in JBA with QPGMR group profile. I need to know is that how you set your users too. Also can someone let me know how QPGMR user profile is set up in your system, Like what special authorities you have given to QPGMR. Should QPGMR have *allobj authority because JBA uses this profile for its process. Your time and help is appreciated. Thanks Ram S. Hari Information Services Wasserstrom ramhari@xxxxxxxxxxxxxxx Voice 614.737.8542 Fax 614.737.3275 _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. This INBOUND E-mail and document(s) has been scanned by an Antivirus Server. ARDEN A Global Company Celebrating over 40 years of making your life more comfortable! This message may contain confidential and/or privileged information. If you are not the adressee or authorized to receive this for the adressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus Server. ------------------------------ message: 4 date: Tue, 2 Aug 2005 15:42:16 -0400 from: "Lemon, Mike" <MLemon@xxxxxxxxxxx> subject: RE: [SYSTEM21] JBA and AS/400 User profiles WOAH!!!! I'm hoping Diana's response was a joke! *ALLOBJ is not required for QUSER. Neither is group profile QPGMR required for your users. We are at 3.51 and all of our users have always been given QUSER group profiles. In addition, whatever profile you specify should **NOT** have *ALLOBJ authority as that would allow any user to delete any object on the system from a command line. Oh, it would also mean that all users would be able to recompile programs, execute any commands, etc. Our users are set to group profile QUSER. No special authorities are assigned to QUSER or the user's profile. On our system, the profile QPGMR does have some special authorities (*ALLOBJ being one of them). I don't KNOW if it is necessary though. Here is the complete list: *ALLOBJ *JOBCTL *SAVSYS *SPLCTL -Mike -----Original Message----- From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, August 02, 2005 3:18 PM To: 'System 21 Users' Subject: RE: [SYSTEM21] JBA and AS/400 User profiles You must set your users to group profile qpgmr and qpgmr must have *allobj for system 21 to execute. -----Original Message----- From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx] On Behalf Of Ram Hari Sent: Tuesday, August 02, 2005 3:06 PM To: 'System 21 Users' Subject: [SYSTEM21] JBA and AS/400 User profiles We are setting up all our users in JBA with QPGMR group profile. I need to know is that how you set your users too. Also can someone let me know how QPGMR user profile is set up in your system, Like what special authorities you have given to QPGMR. Should QPGMR have *allobj authority because JBA uses this profile for its process. Your time and help is appreciated. Thanks Ram S. Hari Information Services Wasserstrom ramhari@xxxxxxxxxxxxxxx Voice 614.737.8542 Fax 614.737.3275 _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. This INBOUND E-mail and document(s) has been scanned by an Antivirus Server. ARDEN A Global Company Celebrating over 40 years of making your life more comfortable! This message may contain confidential and/or privileged information. If you are not the adressee or authorized to receive this for the adressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus Server. _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. ------------------------------ message: 5 date: Tue, 2 Aug 2005 15:26:38 -0400 from: Ram Hari <RamHari@xxxxxxxxxxxxxxx> subject: RE: [SYSTEM21] JBA and AS/400 User profiles This is exactly why I am asking this question. I have some users that run AS/400 queries from command line. These users then have almost all authorities as a SECOFR. Please let me know Thanks Ram S. Hari Information Services Wasserstrom ramhari@xxxxxxxxxxxxxxx Voice 614.737.8542 Fax 614.737.3275 -----Original Message----- From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, August 02, 2005 3:18 PM To: 'System 21 Users' Subject: RE: [SYSTEM21] JBA and AS/400 User profiles You must set your users to group profile qpgmr and qpgmr must have *allobj for system 21 to execute. -----Original Message----- From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx] On Behalf Of Ram Hari Sent: Tuesday, August 02, 2005 3:06 PM To: 'System 21 Users' Subject: [SYSTEM21] JBA and AS/400 User profiles We are setting up all our users in JBA with QPGMR group profile. I need to know is that how you set your users too. Also can someone let me know how QPGMR user profile is set up in your system, Like what special authorities you have given to QPGMR. Should QPGMR have *allobj authority because JBA uses this profile for its process. Your time and help is appreciated. Thanks Ram S. Hari Information Services Wasserstrom ramhari@xxxxxxxxxxxxxxx Voice 614.737.8542 Fax 614.737.3275 _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. This INBOUND E-mail and document(s) has been scanned by an Antivirus Server. ARDEN A Global Company Celebrating over 40 years of making your life more comfortable! This message may contain confidential and/or privileged information. If you are not the adressee or authorized to receive this for the adressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus Server. _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. __________________________________________________________ Message transport security by GatewayDefender.com 3:18:24 PM ET - 8/2/2005 ------------------------------ message: 6 date: Tue, 2 Aug 2005 15:48:33 -0400 from: "Diana Larsson" <dlarsson@xxxxxxxxxxxxxxxxxx> subject: RE: [SYSTEM21] JBA and AS/400 User profiles No it wasn't a joke, that what we were told to setup our users. -----Original Message----- From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx] On Behalf Of Lemon, Mike Sent: Tuesday, August 02, 2005 3:42 PM To: 'System 21 Users' Subject: RE: [SYSTEM21] JBA and AS/400 User profiles WOAH!!!! I'm hoping Diana's response was a joke! *ALLOBJ is not required for QUSER. Neither is group profile QPGMR required for your users. We are at 3.51 and all of our users have always been given QUSER group profiles. In addition, whatever profile you specify should **NOT** have *ALLOBJ authority as that would allow any user to delete any object on the system from a command line. Oh, it would also mean that all users would be able to recompile programs, execute any commands, etc. Our users are set to group profile QUSER. No special authorities are assigned to QUSER or the user's profile. On our system, the profile QPGMR does have some special authorities (*ALLOBJ being one of them). I don't KNOW if it is necessary though. Here is the complete list: *ALLOBJ *JOBCTL *SAVSYS *SPLCTL -Mike -----Original Message----- From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, August 02, 2005 3:18 PM To: 'System 21 Users' Subject: RE: [SYSTEM21] JBA and AS/400 User profiles You must set your users to group profile qpgmr and qpgmr must have *allobj for system 21 to execute. -----Original Message----- From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx] On Behalf Of Ram Hari Sent: Tuesday, August 02, 2005 3:06 PM To: 'System 21 Users' Subject: [SYSTEM21] JBA and AS/400 User profiles We are setting up all our users in JBA with QPGMR group profile. I need to know is that how you set your users too. Also can someone let me know how QPGMR user profile is set up in your system, Like what special authorities you have given to QPGMR. Should QPGMR have *allobj authority because JBA uses this profile for its process. Your time and help is appreciated. Thanks Ram S. Hari Information Services Wasserstrom ramhari@xxxxxxxxxxxxxxx Voice 614.737.8542 Fax 614.737.3275 _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. This INBOUND E-mail and document(s) has been scanned by an Antivirus Server. ARDEN A Global Company Celebrating over 40 years of making your life more comfortable! This message may contain confidential and/or privileged information. If you are not the adressee or authorized to receive this for the adressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus Server. _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. This INBOUND E-mail and document(s) has been scanned by an Antivirus Server. ARDEN A Global Company Celebrating over 40 years of making your life more comfortable! This message may contain confidential and/or privileged information. If you are not the adressee or authorized to receive this for the adressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus Server. ------------------------------ message: 7 date: Tue, 2 Aug 2005 14:54:52 -0500 from: "Roy Luce" <lwl@xxxxxxxxxxxxx> subject: RE: [SYSTEM21] Advanced Planning System (APS) to System21 To the list. No direct experience but I have a client who spent $1.5 million US to implement an APS system. After 5 years of planning and implementing they abandoned the effort. The biggest issue was trying to keep the business rules current. Unfortunately their rules changed every day but took several days to implement. The end result was they could never trust the results. In place of the APS they implemented a Rapid Priority Management system. For more on rapid priority management see the RPM section of Carol Ptak's book "ERP, Tools, Techniques and Applications for integrating the Supply Chain - 2nd Edition" published by St. Lucie Press. The RPM discussion starts on page 188. And yes I am a representative of a Rapid Priority Management system. For more contact me off line. Roy Luce Main: 847-540-9635 Cell: 847-910-0884 Fax: 847-620-2799 *new* Email: lwl@xxxxxxxxxxxxx -----Original Message----- From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx]On Behalf Of Jose Ignacio Betancur Sent: Tuesday, August 02, 2005 1:48 PM To: System 21 Users Subject: [SYSTEM21] Advanced Planning System (APS) to System21 Hi everybody, Somebody has experience with some APS solution integrated to System21 manufacturing modules, could you give the brand and some idea about the complexity to integration with System21, Some about your experience with this issue. Thank in advance _______________________________________________ This is the System 21 Users (SYSTEM21) mailing list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. ------------------------------ message: 8 date: Tue, 2 Aug 2005 15:58:06 -0400 from: "Barbara Byrne" <bbyrne@xxxxxxxxxxx> subject: Re: [SYSTEM21] JBA and AS/400 User profiles I agree with Mike. Be very careful what authority you give users. Very important is the line in AS/400 User Profile. Limit capabilities . . . . . . . *YES *SAME, *NO, *PARTIAL, *YES *YES means they do not have command line access except to enter option number. JBA User Profile should have the follwing line set to 0 = NO. Allow command entry . . . . . . 0 (1=Yes,0=No) Barbara ----- Original Message ----- From: "Lemon, Mike" <MLemon@xxxxxxxxxxx> To: "'System 21 Users'" <system21@xxxxxxxxxxxx> Sent: Tuesday, August 02, 2005 3:42 PM Subject: RE: [SYSTEM21] JBA and AS/400 User profiles > WOAH!!!! I'm hoping Diana's response was a joke! > > *ALLOBJ is not required for QUSER. Neither is group profile QPGMR required > for your users. > > We are at 3.51 and all of our users have always been given QUSER group > profiles. In addition, whatever profile you specify should **NOT** have > *ALLOBJ authority as that would allow any user to delete any object on the > system from a command line. Oh, it would also mean that all users would be > able to recompile programs, execute any commands, etc. > > Our users are set to group profile QUSER. No special authorities are > assigned to QUSER or the user's profile. > > On our system, the profile QPGMR does have some special authorities (*ALLOBJ > being one of them). I don't KNOW if it is necessary though. Here is the > complete list: > > *ALLOBJ > *JOBCTL > *SAVSYS > *SPLCTL > > -Mike > > > > -----Original Message----- > From: Diana Larsson [mailto:dlarsson@xxxxxxxxxxxxxxxxxx] > Sent: Tuesday, August 02, 2005 3:18 PM > To: 'System 21 Users' > Subject: RE: [SYSTEM21] JBA and AS/400 User profiles > > > You must set your users to group profile qpgmr and qpgmr must have *allobj > for system 21 to execute. > > -----Original Message----- > From: system21-bounces@xxxxxxxxxxxx [mailto:system21-bounces@xxxxxxxxxxxx] > On Behalf Of Ram Hari > Sent: Tuesday, August 02, 2005 3:06 PM > To: 'System 21 Users' > Subject: [SYSTEM21] JBA and AS/400 User profiles > > > > We are setting up all our users in JBA with QPGMR group profile. I need to > know is that how you set your users too. > > Also can someone let me know how QPGMR user profile is set up in your > system, Like what special authorities you have given to QPGMR. Should QPGMR > have *allobj authority because JBA uses this profile for its process. > > Your time and help is appreciated. > > Thanks > > > Ram S. Hari > Information Services > Wasserstrom > ramhari@xxxxxxxxxxxxxxx > Voice 614.737.8542 > Fax 614.737.3275 > > > _______________________________________________ > This is the System 21 Users (SYSTEM21) mailing list To post a message email: > SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/system21 > or email: SYSTEM21-request@xxxxxxxxxxxx > Before posting, please take a moment to review the archives at > http://archive.midrange.com/system21. > > > > This INBOUND E-mail and document(s) has been scanned by an Antivirus Server. > > > > > ARDEN > A Global Company > Celebrating over 40 years of making your life more comfortable! > > This message may contain confidential and/or privileged information. If you > are not the adressee > or authorized to receive this for the adressee, you must not use, copy, > disclose, or take any action > based on this message or any information herein. If you have received this > message in error, > please advise the sender immediately by reply e-mail and delete this > message. > > This OUTBOUND E-mail and Document(s) has been scanned by an Antivirus > Server. > > _______________________________________________ > This is the System 21 Users (SYSTEM21) mailing list > To post a message email: SYSTEM21@xxxxxxxxxxxx > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/system21 > or email: SYSTEM21-request@xxxxxxxxxxxx > Before posting, please take a moment to review the archives > at http://archive.midrange.com/system21. > _______________________________________________ > This is the System 21 Users (SYSTEM21) mailing list > To post a message email: SYSTEM21@xxxxxxxxxxxx > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/system21 > or email: SYSTEM21-request@xxxxxxxxxxxx > Before posting, please take a moment to review the archives > at http://archive.midrange.com/system21. > > ------------------------------ _______________________________________________ This is the System 21 Users (SYSTEM21) digest list To post a message email: SYSTEM21@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/system21 or email: SYSTEM21-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/system21. End of SYSTEM21 Digest, Vol 3, Issue 106 ****************************************
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.