Wayne Evans' LOGCMD
"Steve McKay" <[email protected]> Thu, 1 May 2008 10:58:27 -0500
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Organization | midrange.com |
| Message-ID | <[email protected]> |
I have a copy of Wayne Evans' LOGCMD program/command. This allows specified non-admin users to gain *ALLOBJ authority and records the commands they enter to QAUDJRN by acquiring a user profile handle, turning on *CMD auditing on the user profile, and processing the entered commands as messages from the external message queue. This works well if the user stays on the QCMD screen that is initially displayed. If the user enters some command that has it's own command line (WRKACTJOB, for instance), any commands entered on that command line do not get recorded in QAUDJRN. Does someone know of a way to correct this behavior or of another method of giving users (on-call programmers, actually) a way to respond to problems which would require *ALLOBJ authority without actually giving them *ALLOBJ on their user profile? TIA, Steve _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.