RE: Adopted authority and triggers

[Ed Fishel <edfishel@xxxxxxxxxx>]

Roger Mackie wrote on 04/03/2007 09:52:56 AM:

> It was my understanding that IBM recommends the trigger be in the same
> library. It caused us (more severe) problems when they weren't.

I am not suggesting that you change this design. I was only suggesting that
if the trigger program is in this library that, then a user will not be
authorized to call that trigger program if you have excluded them from that
library. If this is the case, then even if the trigger program adopts
authority from QSECOFR, it will not help because the not authorized problem
is occurring before the trigger program has a chance to run.

I still think the best advice I have give you today is to use the security
audit journal and the job log to determine the exact problem.

Ed Fishel,
edfishel@xxxxxxxxxx