Re: Interactive Debugging

Xuan,

Thanks for the information.  I guess I'll have to wait until we get a 
machine that'll run V5R4.  *SERVICE authority allows way too much for our 
security officer to allow programmers to have it.  Interestingly enough 
looking at SE20227, it lists V5R1 through V5R4 as affected releases.  Too 
bad there is no PTF for the other 'supported' operating systems.  I know 
that's not you or any of the team in Toronto's fault.

Anyway, I really appreciate your response.

Thanks again,
Michael Quigley
AS/400 Programming Section
The Way International
www.TheWay.org


wdsci-l-bounces@xxxxxxxxxxxx wrote on 11/29/2006 12:56:44 PM:

date: Tue, 28 Nov 2006 13:13:53 -0500
from: Xuan Chen <xuanchen@xxxxxxxxxx>
subject: Re: [WDSCI-L] Interactive Debugging

Michael,

Setting a service entry point in a program that will fire when the 

program 

is run under a different user profile, requires that the 
"setting user profile" have enough authority to access the STRSRVJOB 
command and to access the targeted user profile. 
The SETTER must have *USE, *CHANGE or *ALL access to both of these 

items.

There was a problem with the authority checking for setting SEP in this 
situation, and an APAR (SE20277)  had been opened for it.
The workaround for this problem is to give the SETTER user profile the 
*SERVICE special authority. 

This APAR has been fixed in V5R4, and the PTF # is SI19633.

Thanks,

Xuan Chen,  Problem Determination Tools for iSeries
(905) 413-3769 T/L 969-3769
xuanchen@xxxxxxxxxx