RE: Changing group profiles

["Cotes, Steven" <cotess@xxxxxxxxxxx>]

Angie,
Changing the Group Profile attribute for a User's Profile
requires *SECADM special authority. It would be possible to
have your menu program call a program, that would run under
owner authority and be owned by a profile with *SECADM
authority, that could change the User's Group Profile. But I
wouldn't do it.

CHGJOBD is not used to change a user's library list, it is used
to change the attributes of a JOBD.

I would break your problem into it's two parts:
For the LIBL, each menu option needs to do it's own CHGLIBL
to set up it's needed LIBL. If you want to be more polished, before
the CHGLIBL do a RTVJOBA USRLIBL(&LIBL) and store it in a
DTAARA in QTEMP so you can put it back the way it was when
the user comes out of the menu option.

For the Group Profiles, I would challenge why and how they are
being used. With BPCS, if you have a Group Profile called maybe
SSA that everyone belongs to and it has complete access to data
files, then from a security perspective you are very vulnerable to any
non-BPCS interfaces, ie. ODBC, FTP, data-transfer, etc. I would
recommend looking at implementing Object/Resource control with
programs adopting authority to control data access. Then most
users don't need to belong to any groups.
That said, another area you may want to look at is Supplemental
Groups. You can now set up a profile so that it gets group authority
to objects from more than one group.

Write me if I wasn't clear, or you would like more information.

 - HTH,
 - Steve Cotes
 - cotess@data-io.com

> ----------
> From:         wawrzaszek@austeel.com[SMTP:wawrzaszek@austeel.com]
> Sent:         Wednesday, November 18, 1998 1:01 PM
> To:   midrange
> Subject:      Changing group profiles
> 
> I would like to create a program to change group profiles on the fly.
> The
> idea is to create a generic menu that will allow a user to have one
> user
> profile and password but be able to get into different softwares.  1-
> BPCS 
> 2- Payroll, each software requires a different library list and
> different
> group profile.  I thought i could just do a chgjobd for the job
> description
> to pick up the new library list (?), but how can I change the group
> profile.   Any help would be greatly appreciated.
> 
> Thanks, 
> 
> Angie Wawrzaszek
> 
> 
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---