Wayne Evans' LOGCMD

"Steve McKay" <[email protected]> Thu, 1 May 2008 10:58:27 -0500
Newsgroups gmane.comp.systems.as400.security
Organization midrange.com
Message-ID <[email protected]>
I have a copy of Wayne Evans' LOGCMD program/command.  This allows specified
non-admin users to gain *ALLOBJ authority and records the commands they
enter to QAUDJRN by acquiring a user profile handle, turning on *CMD
auditing on the user profile, and processing the entered commands as
messages from the external message queue.  This works well if the user stays
on the QCMD screen that is initially displayed.  If the user enters some
command that has it's own command line (WRKACTJOB, for instance), any
commands entered on that command line do not get recorded in QAUDJRN.

Does someone know of a way to correct this behavior or of another method of
giving users (on-call programmers, actually) a way to respond to problems
which would require *ALLOBJ authority without actually giving them *ALLOBJ
on their user profile?

TIA,

Steve 


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.