Re: Security Question

[rob@xxxxxxxxx]

I used a utility, SCNMSGF, to search QCPFMSG for "authorized to this 
command" and didn't get any hits.  I beat on it some more and settled with 
"authorized to command" (dropped "this") and got a few hits.
Message    Sev Text 
CPD0032     30 Not authorized to command &2 in library &3. 
CPD9B16     40 Cannot remove line &1.  Not authorized to command. 
CPD9808     20 Not authorized to command &1 in &2. 
CPF334F     30 Not authorized to command Delete Expired Spooled file
CPF9824     40 Not authorized to command &1 in library &2. 
CPI39FE      0 Not authorized to command &1. 
A couple I threw out.  Leaving
Message    Sev Text 
CPD0032     30 Not authorized to command &2 in library &3. 
CPD9808     20 Not authorized to command &1 in &2. 
CPF9824     40 Not authorized to command &1 in library &2. 
CPI39FE      0 Not authorized to command &1. 

Then I used a generic user profile and typed in PWRDWNSYS and hit F4.  I 
got CPD0032.  Rest of the joblog was worthless.
Message ID . . . . . . :   CPD0032
Date sent  . . . . . . :   01/08/08
Message type . . . . . :   Diagnostic 
> From . . . . . . . . . :   DUMMY
 
> From program . . . . . . . . . :   QCARULE 
  From library . . . . . . . . :     QSYS 
  Instruction  . . . . . . . . :     07A7 
 
To program . . . . . . . . . . :   QUIMNDRV
  To library . . . . . . . . . :     QSYS 
  Instruction  . . . . . . . . :     060C 

So, I added *JOBCTL to that user and logged off/on and got the same.
So, then I editted the object authority on the command to give that user 
*USE and removed *JOBCTL from that user.  Log off/on and got CPD0175. 
Changed the user id by setting LMTCPB to *NO.  Log off/on and I can at 
least prompt the command.  Got wild and crazy and tried
PWRDWNSYS CONFIRM(*YES)
and got CPF1038
Cause . . . . . :   The user does not have the authority to the STRSBS,
  ENDSBS, ENDSYS, or PWRDWNSYS command. 

Did you check out the authority to those commands also?

Rob Berendt