Re: What is the best way to allow this to work?

"Steve McKay" <[email protected]> Thu, 28 Aug 2008 11:28:19 -0500
Newsgroups gmane.comp.systems.as400.security
Organization midrange.com
Message-ID <[email protected]>
You are correct, sir!  Eventually, a CL program gets called which changes 
the Run Priority of the job (CHGJOB RUNPTY(11)), adds the physical file 
member, then changes the Run Priority back to the original priority.  This 
CHGJOB command is  what causes the error message, not the OVRDBF.  I suppose 
the changing of the Run Priority is for performance reasons (the entire 
process is vendor-supplied) and whether it should be used is open to debate. 
Nevertheless, what would one do to allow this to work (given that the 
program itself cannot be modified)?

Thanks,

Steve

"Simon Coulter" <shc-Q/[email protected]> wrote in message 
news:mailman.6826.1219873131.2545.security400-Zwy7GipZuJitq2lpoERdew@public.gmane.org
>
> On 28/08/2008, at 6:50 AM, Steve McKay wrote:
>
>> I have a user who have no *SPCAUT.  She is trying to run a utility 
>> program
>> which allocates physical file members.  It runs the following command:
>>
>> OVRDBF FILE(MBRNAM) FRCRATIO(1) WAITFILE(*IMMED) WAITRCD(*IMMED) 
>> SHARE(*NO)
>> OVRSCOPE(*CALLLVL)
>>
>> When the user runs it, she gets a CPF1337 - Cause . . . . . :   &3/ &2/&1 
>> is
>> not authorized to change either parameters Run priority, Time  slice, 
>> Purge,
>> Time slice end pool, or Default wait time.  Special job control 
>> authority is
>> required to change the requested parameter(s).  (I suppose that  this is 
>> due
>> to the WAITFILE or the WAITRCD parm.)
>
> I'm fairly certain that message is NOT sent by OVRDBF. CHGJOB sends  that 
> message. Re-examine the job log and show the from and to program 
> information for the message.
>
> Regards,
> Simon Coulter.
> --------------------------------------------------------------------
>    FlyByNight Software         OS/400, i5/OS Technical Specialists
>
>    http://www.flybynight.com.au/
>    Phone: +61 2 6657 8251   Mobile: +61 0411 091 400        /"\
>    Fax:   +61 2 6657 8251                                   \ /
>                                                              X
>                  ASCII Ribbon campaign against HTML E-Mail  / \
> --------------------------------------------------------------------
>
>
> 


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.