Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Adopted Authority

Posted on 2011-03-03
1
Medium Priority
?
818 Views
Last Modified: 2012-05-11
I have a program that I have written that essentially ends a particular subsystem and then starts it back up.  I want to allow one of our generic plant user accounts the ability to run this command so they can start/stop a subsystem for troubleshooting. The problem is that the generic user does not have permissions to use the ENDSBS/STRSBS command and I don't really want to go out to each of our 50 servers to change the authority for those commands.

I attempted to do a SBMJOB on the ENDSBS/STRSBS commands and run that as QSYSOPR, but the generic user profile does not have authority to the QSYSOPR user profile.

Does anyone know a way that I can run this program using this generic user profile? I didn't know if there was a compile option or a command that would help me get around this?

Any help would be greatly appreciated.
0
Comment
Question by:Matthew Roessner
1 Comment
 
LVL 35

Accepted Solution

by:
Gary Patterson earned 1000 total points
ID: 35027437
Sure:

1) Compile the program to use adopted authority, and
2) Then assign ownership of the program to a profile that has authority to run the commands (like QSYSOPR in your example)

http://www.mcpressonline.com/security/ibm-i-os400-i5os/object-security-by-adoption.html

- Gary Patterson
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…

927 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question