From: Leland Wong To: All
I am on V2R1 and using security level 30. I have a file in a library where *PUBLIC needs *CHANGE authority. I discovered that there is a field in the file that should not be seen, but can be viewed using the DSPPFM command. I made an authorization list for the two people that use the DSPPFM command and set *PUBLIC to *EXCLUDE. The problem is that I have another file in a different library where the program needs everyone to be able to use the DSPPFM command. Is there a way to secure the DSPPFM command only on certain files or libraries? I can't change the program because I don't have the source code.
From: Ernie Malaga To: Leland Wong
Since you are running the DSPPFM command from within a program (where everyone needs to use DSPPFM), your problem can be easily solved as follows:
1. Check who owns the program. You can do that with the Display Object Authority (DSPOBJAUT) command.
2. Make sure the owner is authorized to run DSPPFM. Check your authorization list. If the owner is not listed there, edit the authorization list (with EDTAUTL) to add the name.
3. Now change the program (CHGPGM) to USER(*OWNER) so that the program runs adopting the authority of the owner.
From here on, anyone who runs the program will be able to run it flawlessly, even though it uses DSPPFM.
LATEST COMMENTS
MC Press Online