Re: What commands should have ALWLMTUSR(*YES)?

LMTCPB in conjunction with ALWLMTUSR only affect the command line..

So any command can be run if it's access through some sort of menu...

Such as DSPMSG via the SysReq menu...

Or for instance, if you happen to put WRKOBJPDM on a menu...

Why then a user could point WRKOBJPDM to QSYS and "16-Run" any command in
there. They can't type a command in at the command line provided by
WRKOBJPDM....but they can "16-Run" it!

Subject to normal object authority checking (including any adopted
authorities your menu system may have provided ;) )

Charles



On Thu, Oct 26, 2017 at 3:33 PM, Peter Dow <petercdow@xxxxxxxxx> wrote:

Hi Rob,

To disprove what Mark said, you need to change authority on the DSPMSG
command to DUMMY *EXCLUDE, then try it.

--
*Peter Dow* /
Dow Software Services, Inc.
909 793-9050
petercdow@xxxxxxxxx <mailto:petercdow@xxxxxxxxx>
pdow@xxxxxxxxxxxxxx <mailto:pdow@xxxxxxxxxxxxxx> /



On 10/26/2017 1:07 PM, Rob Berendt wrote:

I do not think you do. Read my message again. Or let me explain below
CHGCMD QSYS/SNDMSG ALWLMTUSR(*NO)
Command SNDMSG in library QSYS changed.
CHGCMD QSYS/DSPMSG ALWLMTUSR(*NO)
Command DSPMSG in library QSYS changed.
CHGCMD QSYS/DSPJOB ALWLMTUSR(*NO)
Command DSPJOB in library QSYS changed.
CHGCMD QSYS/DSPJOBLOG ALWLMTUSR(*NO)
Command DSPJOBLOG in library QSYS changed.
CRTUSRPRF DUMMY LMTCPB(*YES)
Special authorities granted *NONE.
User profile DUMMY created.

Sign on as DUMMY

From the real command line

DSPMSG
Command DSPMSG in library *LIBL not allowed.
SysReq 4, Messages for: DUMMY screen appears.
SysReq 6, Messages for QSYSOPR screen appears.
SysReq 3, DSPJOB screen appears, and, 10. Display job log works just fine.
SysReq 5, SNDMSG screen appears, and I sent a message.

ROB sees:

From . . . : DUMMY 10/26/17 16:07:01

hi dude


Rob Berendt

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD