Re: Removing *ALLOBJ from user profile
"Steve McKay" <[email protected]> Fri, 11 Dec 2009 15:12:43 -0600
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Organization | midrange.com |
| Message-ID | <[email protected]> |
Mark - The profile owns only IFS objects - no program objects, no files. PRTADPOBJ returns 'No objects that adopt . . . were found'. The profile 'owns' an application but it has QPGMR as the group profile and *GRPPRF as the 'OWNER', so the profile itself doesn't actually own anything other than a couple of IFS directories. "Mark S. Waterbury" <[email protected]> wrote in message news:mailman.2630.1260561069.31599.security400-Zwy7GipZuJitq2lpoERdew@public.gmane.org > Hi, Steve: > > You should also determine if any *PGMs that are owned by this profile run > with USRPRF(*OWNER) adopted authority. > > Type GO SECTOOLS and look at option 21. Adopting objects (PRTADPOBJ). > > All the best, > > Mark S. Waterbury > > > Steve McKay wrote: >> I have a user profile that is not used to sign-on but has *ALLOBJ >> authority. I want to revoke *ALLOBJ from the user profile but I don't >> want to break any production jobs. How can I determine what the effect >> might be if I remove *ALLOBJ? Can I do something with the audit journal >> to display all the things that this user profile might touch in the >> course of the day? >> >> Thanks for your help! >> >> Steve >> _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.