Re: Security Level 20 to Level 30 questions. -- MIDRANGE-L

Subject: Re: Security Level 20 to Level 30 questions.
From: Buck Calabro <kc2hiz@xxxxxxxxx>
Date: Thu, 23 May 2024 18:01:33 -0400
List-archive: <https://archive.midrange.com/midrange-l/>
List-post: <mailto:midrange-l@lists.midrange.com>
List-subscribe: <https://lists.midrange.com/mailman/listinfo/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=subscribe>
List-unsubscribe: <https://lists.midrange.com/mailman/options/midrange-l>, <mailto:midrange-l-request@lists.midrange.com?subject=unsubscribe>

On 5/23/2024 4:43 PM, K Crawford wrote:

2. In our initial program it sets up the library list. I have the library
QHTTP in it. This fails with CPF2182 - Not authorized to library. Looking
at QHTTP it has *PUBLIC *EXCLUDE. Any suggestions? Add a group profile to
the library authority, almost all of our users have a group profile. The
reason we have this library in the user library list is some programs call
items in this library.

For programs needing access to special libraries like QHTTP, I like to make the *PGM USRPRF(*OWNER) and make the OWNER() a group profile with authority to the special library. This way, the user does not have access, but the programs they use have the authority. An *AUTL might be useful here, too. For SQL access you might look at SET OPTION DYNUSRPRF=*OWNER and USRPRF=*OWNER.

This mailing list archive is Copyright 1997-2026 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.