1. Generally the only special authority would be *SPLCTL.  I would prefer 
to give less authority and wait for a authority problem than to give more 
authority than needed and never know.
2. What have you got in the QHTTP library. On my system there are only 2 
user indexes ?
Library lists should be easily set and not require a change to the initial 
program but maybe you only have one application. 
<Vendor Plug>
For Library lists and Menus look at Admin4i 
https://msd.net.au/applications/admin4i/
</Vendor Plug>
Cheers
Don
From:   "K Crawford" <kscx3ksc@xxxxxxxxx>
To:     MIDRANGE-L@xxxxxxxxxxxxxxxxxx
Date:   24/05/2024 06:43 AM
Subject:        Security Level 20 to Level 30 questions.
Sent by:        "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxxxxxxxx>
I have been wanting to clean this up for some time.  If we get the new
system it will be time.  I know going to a Power 10 will bump my Level 20
to a Level 30.  So I am looking at my system to figure out the impact.  I
know for a fact (don't beat on me for this) that I will need/should change
user profiles security.  I want to get rid of *ALLOBJ from normal users. I
want to change the User Class to *USER.  I have set up a user to test 
with.
Questions:
1. for your everyday users what "User Class" and "Special Authorities" do
they have?  I know it depends.
2. In our initial program it sets up the library list.  I have the library
QHTTP in it.  This fails with CPF2182 - Not authorized to library. Looking
at QHTTP it has *PUBLIC *EXCLUDE.  Any suggestions?  Add a group profile 
to
the library authority, almost all of our users have a group profile.  The
reason we have this library in the user library list is some programs call
items in this library.
I am sure I will have more questions.
TIA
As an Amazon Associate we earn from qualifying purchases.