Re: Changing user profiles without *SECADM; adding *SECADM without ev enhaving *SECADM

["Ed Fishel" <edfishel@xxxxxxxxxx>]

Bryan,

I agree with the other people that responded and said that it sound like
the user can do this because they are using adopted authority. The two of
the many possible places the adopted authority is coming from are the menu,
if it is a TYPE(*PGM) menu, or from the users initial program. One way to
determine where the adopted authority is coming from is to turn on *PGMADP
auditing and then look at the AP audit record. This audit record will be
written to the QAUDJRN each time adopted authority is used. It will include
the name and library of the program using the adopted authority. It will
also include the name of the owning user profile that the program is
adopting.

Ed Fishel,
edfishel@US.IBM.COM


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---