Re: triggers and DDM files

["Crispin Bates" <cbates@xxxxxxxxxxx>]

Guy,

DDM Access can be a pain. There's a setting on the Network Attributes of the 
target system (CHGNETA DDMACC(value)) that can control how DDM access is 
authorized. This may be set to a program name that is subsequently setting 
the job to run under the source profile (and failing). I commonly see QUSER 
as always running the target system jobs (which is another way of doing it, 
but I can't find what the setting is) but can be a problem from a security 
perspective, and thought that was the default, which is why I wonder if the 
target system has an exit program set up.

Using the CHGNETA and setting DDMACC to a program that controls the access 
is probably the most secure route...

http://publib.boulder.ibm.com/infocenter/iseries/v5r4/index.jsp?topic=/ddm/rbae5exitpgm.htm
http://www.itjungle.com/fhg/fhg052604-story02.html

Crispin.

----- Original Message ----- 
From: <GUY_HENZA@xxxxxxxxxxxxxx>
To: <rpg400-l@xxxxxxxxxxxx>
Cc: <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, February 05, 2008 1:33 PM
Subject: triggers and DDM files


> We have a file on our SALES box that has a trigger on it.  We have a new
> project where MFG needs access to that file so DDM files were set up. 
> When
> a MFG user tries to access the DDM file the trigger fails because the user
> is not set up on the SALES box.  Is there a way to get the trigger to run
> without setting up 300 MFG users on the SALES box?
>
> Regards,
>
> Guy
> --
> This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
> To post a message email: RPG400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
> or email: RPG400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/rpg400-l.