RE: Installing running applications as QSECOFR

["John Earl" <john.earl@xxxxxxxxxxxxx>]

> Additionally, there are certain functions that just can't be 
> done without QSECOFR authority ... user profile handle 
> switching, for example.  You an do it if you know the user 
> and password you are switching to, but in order to do the 
> handle switch WITHOUT requiring the userid & password, you 
> need QSECOFR authority.

User profile switching requires *USE to the object.  Given the
difficulty of creating your own "FRED" profile and making sure it always
has *USE authority to every profile it might ever want to switch to
(including profiles not yet created), giving "FRED" *ALLOBJ seems like a
reasonable compromise.  But it is likely also be unnecessary to provide
"FRED" with the other seven Special Authorities.

IMHO,

jte
--
 
John Earl, VP and Chief Technology Officer
PowerTech:   253-872-7788
Direct:          253-479-1408
Mobile:          206-669-3336
John.Earl@xxxxxxxxxxxxx
 

 
 
Email is an excellent way to communicate material that is not time
sensitive.  If your communication is of a more urgent nature, please
call. 
 
===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.