Re: auditor access

Just yesterday I got a request from our auditors.

<snip>
AS-400 Commands to run & provide output:

DSPUSRPRF USRPRF(*ALL) + TYPE(*BASIC) OUTPUT(*OUTFILE) OUTFILE(specify
LIB/FILENAME)

WRKSYSVAL OUTPUT (*OUTFILE) OUTFILE (specify LIB/FILENAME)

ANZDFTPWD ACTION(*NONE)

Execute the DSPOBJAUT command to output the public and private authorities
for production libraries and critical objects in the libraries including
libraries QSYS, QSYS2, and QUSRSYS.
</snip>

Ok, they had some copy/paste errors, that and there is no *OUTFILE option
for WRKSYSVAL.

When it came to the DSPOBJAUT I told them all objects were critical and
sent them the 1.5M rows returned by
select count(*)
from qsys2.object_privileges
https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/IBM%20i%20Technology%20Updates/page/QSYS2.OBJECT_PRIVILEGES%20View

Of course, no mention was made of objects outside of the QSYS.LIB file
structure...


Rob Berendt