Re: How to grant limited access to BPCS user? Query/400

[DAsmussen@xxxxxxx]

Khalid,

In a message dated 2/24/00 10:49:46 PM Eastern Standard Time, 
logic_km@hotmail.com writes:

> I want to give access of query/400 to my users. But I don't want them to 
see 
>  beyond their scope. For example sales department should not view GJD,GGM 
>  files etc.
>  
>  Since group profile of each user is SSA which is the owner of all BPCS 
>  objects including logical & physical files; hence it is not possible to 
>  restrict any user to see beyond its scope.
<<snip>>

This is a tough question.  AFAIK, SSA must still own everything in order for 
you to continue to receive support.  Hmmm.  This is going to require an awful 
lot of work on your part!  If I'm missing a simple solution, others feel free 
to comment (nicely).

First, create a library to place the mainline query objects in using 
CRTDUPOBJ (i.e., WRKQRY, RUNQRY) and duplicate them into it.  Add your new 
library into the system portion of the library list above QSYS.  The latter 
two steps will prevent your loss of these changes during your next OS/400 
upgrade.  Revoke all authority from these objects in the new library (*PUBLIC 
*EXCLUDE with no other specifc authorities).

Now, create new user profiles with group profiles (other than SSA) that 
represent what sets of files to which people have access under query and 
grant access to your new query objects to these group profiles.  Then create 
and assign authorization list entries to the files based upon the new query 
groups, ensuring that *PUBLIC is set to *EXCLUDE for the files.  Query users 
must sign on with their query profiles in order to query the files.

Tough work.  Perhaps someone else can come up with a simpler solution, but I 
don't think so...

HTH,

Dean Asmussen
Enterprise Systems Consulting, Inc.
Fuquay-Varina, NC  USA
E-mail:  DAsmussen@aol.com

"Everywhere is walking distance, if you have the time." -- Steven Wright
+---
| This is the BPCS Users Mailing List!
| To submit a new message, send your mail to BPCS-L@midrange.com.
| To subscribe to this list send email to BPCS-L-SUB@midrange.com.
| To unsubscribe from this list send email to BPCS-L-UNSUB@midrange.com.
| Questions should be directed to the list owner: dasmussen@aol.com
+---