Re: What is the best way to allow this to work?
"Steve McKay" <[email protected]> Thu, 28 Aug 2008 11:28:19 -0500
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Organization | midrange.com |
| Message-ID | <[email protected]> |
You are correct, sir! Eventually, a CL program gets called which changes the Run Priority of the job (CHGJOB RUNPTY(11)), adds the physical file member, then changes the Run Priority back to the original priority. This CHGJOB command is what causes the error message, not the OVRDBF. I suppose the changing of the Run Priority is for performance reasons (the entire process is vendor-supplied) and whether it should be used is open to debate. Nevertheless, what would one do to allow this to work (given that the program itself cannot be modified)? Thanks, Steve "Simon Coulter" <shc-Q/[email protected]> wrote in message news:mailman.6826.1219873131.2545.security400-Zwy7GipZuJitq2lpoERdew@public.gmane.org > > On 28/08/2008, at 6:50 AM, Steve McKay wrote: > >> I have a user who have no *SPCAUT. She is trying to run a utility >> program >> which allocates physical file members. It runs the following command: >> >> OVRDBF FILE(MBRNAM) FRCRATIO(1) WAITFILE(*IMMED) WAITRCD(*IMMED) >> SHARE(*NO) >> OVRSCOPE(*CALLLVL) >> >> When the user runs it, she gets a CPF1337 - Cause . . . . . : &3/ &2/&1 >> is >> not authorized to change either parameters Run priority, Time slice, >> Purge, >> Time slice end pool, or Default wait time. Special job control >> authority is >> required to change the requested parameter(s). (I suppose that this is >> due >> to the WAITFILE or the WAITRCD parm.) > > I'm fairly certain that message is NOT sent by OVRDBF. CHGJOB sends that > message. Re-examine the job log and show the from and to program > information for the message. > > Regards, > Simon Coulter. > -------------------------------------------------------------------- > FlyByNight Software OS/400, i5/OS Technical Specialists > > http://www.flybynight.com.au/ > Phone: +61 2 6657 8251 Mobile: +61 0411 091 400 /"\ > Fax: +61 2 6657 8251 \ / > X > ASCII Ribbon campaign against HTML E-Mail / \ > -------------------------------------------------------------------- > > > _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.