RE: Allowing CLRPFM with Limitied Capabilities

["John Earl" <john.earl@xxxxxxxxxxxxx>]

> Actually, I think you only need *OBJMGT to do a CLRPFM.  *ALL will
allow
> deleting the file but *CHANGE  + *OBJMGT won't.

This is true - *ALL authority to the file is more than is necessary to
do the job.  

jte


--
John Earl, VP and Chief Technology Officer
PowerTech:   253-872-7788
Direct:          253-479-1408
John.Earl@xxxxxxxxxxxxx
 

 
First Annual PowerTech Customer User Group - iNSIGHT '07 -- March 4-6,
2007 in Las Vegas, NV
iNSIGHT '07 is the only conference focused on System i security and
compliance issues.  
Learn more! www.powertech.com/insight.asp
 
===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.
 
> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
> bounces@xxxxxxxxxxxx] On Behalf Of Gord Hutchinson
> Sent: Monday, February 12, 2007 8:30 AM
> To: Midrange Systems Technical Discussion
> Subject: Re: Allowing CLRPFM with Limitied Capabilities
>
> > On Mon, 12 Feb 2007 09:56:37 -0500, rob@xxxxxxxxx wrote:
>
> > No, the limitation LMTCPB does not affect the ability to run that
> command,
> > unless they are typing it themselves at the command line.
> >
> > What limits them is that they cannot simply have *CHANGE authority to
the
> > file.  They have to have *ALL.  Not *ALLOBJ, just *ALL to the file.
> > Personally I think it is a stupid requirement.  I can easily run a
sql
> > statement
> > DELETE FROM MYFILE
> > which will delete every record, but I can't run any member command
like
> > CLRPFM.
>
> Actually, I think you only need *OBJMGT to do a CLRPFM.  *ALL will
allow
> deleting the file but *CHANGE  + *OBJMGT won't.
>
>
> Gord
>
>
> --
> Gord Hutchinson
> Database Administrator, IT
> TST Overland Express
> ghutchinson@xxxxxxxxxxxxxxx
> 905-212-6330
> fax: 905-602-8895
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.