RE: Prevent user from changing authorisation list using edtobjaut and ass. commands

[CWilt@xxxxxxxxxxxx]

Don't think so.

*ALL access is *ALL access.  Perhaps the user should only have *UPDATE.

The only other option is to revoke the users authority to the CHGOBJAUT
command.
But I don't think Ops-Nav would be affected by that.

Charles


> -----Original Message-----
> From: L. Maartens [mailto:l.maartens@xxxxxxxxx]
> Sent: Thursday, February 26, 2004 6:44 PM
> To: Midrange Systems Technical Discussion
> Subject: Prevent user from changing authorisation list using edtobjaut
> and ass. commands
> 
> 
> Hello list,
> 
> Does anyone have any idea how to prevent a user with *all 
> authority to a
> source file to change/remove the authorisation list attached 
> to that file ?
> 
> The said *all access to the source file is obtained by the user's name
> inserted in the authorisation list with *all capability.
> 
> The *all capability is required for adding/changing/deleting 
> members in the
> source file.
> 
> The user does not have any special authorities.
> 
> Setting the limited capabilities provides some protection, 
> but IIRC provides
> no protection from API and/or Opsnav capabilities.
> 
> Thanks already,
> 
> Loek Maartens,
> Veracity Software Consultancy BV
> 
> 
> _______________________________________________
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>