Re: Users with *ALLOBJ

[Jim Oberholtzer <midrangel@xxxxxxxxxxxxxxxxx>]

Won’t authority collection tell you what the users actually need?

Collect on one of the users for a day and get your SQL going to empirically figure it out. 

 
Jim Oberholtzer
Agile Technology Architects

> On May 11, 2024, at 12:58 PM, ubelhor@xxxxxxxxxxxxx wrote:
>
> Hello:
> We are process of a task to get rid of *ALLOBJ authority for system users.   Out of hundreds of profiles with *ALLOBJ we are down to 9 system users that have *ALLOBJ.   They are in the finance group and insist they must have the *ALLOBJ authority.    We are tackling the users 1 at a time out of the 9 to see what they actually need for authority and ultimately get the *ALLOBJ removed from their profiles.   It was discovered that over the years by default user profiles had been copied and no one really considered the impact of *ALLOBJ.
> We don't necessarily want to put in a package.   Just want to deal with sorting out safely what the 9 system users really need for authority.   They are using JDE World (green screen) and also have a bunch of add on applications.   Do you have any recommendations on how to  most efficiently address the task?
> ThanksRegards,Laura
> Laura A. UbelhorPresidentConsultech Services, Inc.www.consultechservicesinc.com
> phone 248-701-7410
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.