Re: Running an i5 program from Java which needs special authorities

[Loyd Goodbar <loyd@xxxxxxxxxxxxxx>]

Not sure how fancy you want to make it, but perhaps compile the programs
with USRPRF(*USER). Can Java invoke the profile handle APIs? Where I'm going
is the programs, if run by normal users, would fail due to API security
requirements. However, Java would set up the correct environment (by
swapping profile handles) to a user with the proper authority before calling
the program. And of course, swapping back to the non-privileged user after
execution.

--Loyd

On Wed, Mar 4, 2009 at 1:54 PM, David Gibbs <david@xxxxxxxxxxxx> wrote:

> Blalock, Bill wrote:
> > I am designing i5 programs, CLLE or RPGLE, to be called from Java.
> > The i5 program will use APIs which require
> > special authority: *ALLOBJ and *SECADM
> > file authority: *OBJOPR, *READ
> >
> > I'd like some suggestions on how to approach this problem.  Warnings
> > about pitfalls to avoid would be appreciated.
>
> A called program is just a called program.  Nothing special needs to be
> done when invoking from Java.
>
> The only thing I would suggest is you protect the programs from being run
> by any other mechanism.
>
> Perhaps check to ensure the program was invoked from the remote command
> server (QZRCSRVS)?
>
> david