Re: chgc0100 exit point. was Default for command without default value?

[thomas@xxxxxxxxxxx]

Steve:

On Thu, 02 August 2001, "Steve Richter" wrote:

> disagree. the way it is now, if QPGMR owns the exit pgm, anyone in the Qpgmr
> group can replace an exit pgm that was registered by an *allobj user. The
> new pgm will be run by many different users on the system, some with *allobj
> authority. Code in the new pgm could then check that the user is a known
> *allobj/*secadm aut user and then do whatever it wants on the system.
> 
> Requiring the exit pgm be owned by an *a/*s user prevents this and does not
> limit functionality.

That's one way of accomplishing that, but not the only way. Not having QPGMR be 
the owner and securing the program with an *AUTL that doesn't allow QPGMR and 
its members is the basics of another.

We have plenty of customers who object to programs (exit programs especially) 
being owned by an *ALLOBJ profile.

This is merely a "real world" comment, not an objection to your point which 
does have merit even though there are opposing arguments.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/




+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---