Authority to view a user profile

5 pts.
Tags:
*ALLOBJ
AS/400
Security
I want to grant authority to our technical support personnel to see a user profile. How can I do this without giving them *ALLOBJ authority, or granting them object authority against each individual user profile?

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • TheRealRaven
    Use adopted authority. Create a simple CL program that either accepts a user profile name as a parameter or prompts from a profile name. Have the program run the DSPUSRPRF command.

    When you compile the program, specify USRPRF(*OWNER) on the create command. Assign an owner that has *ALLOBJ special authority.

    Now, anyone who is authorized to run that program will be able see the result of DSPUSRPRF.

    You'll want to set *PUBLIC *EXCLUDE authority on the program. Then you can grant *USE authority for it only to your Support people. Better would be to create an *AUTL and associate it with the program, and set *PUBLIC *AUTL on the program. Then you can add *USE authority to the *AUTL for Support people and *PUBLIC *EXCLUDE for everyone else, and remove that authority whenever you want someone taken off the list.
    21,845 pointsBadges:
    report
  • MarshaS
    Thank you for your help, that solution works.  The only issue with the DSPUSRPRF is that is does not allow them to use *ALL or generic entries.  But I guess we can live with that.
    10 pointsBadges:
    report
  • TheRealRaven
    You can only use generic* or *ALL if the DSPFUSRPRF command will be printing the output or sending it to an outfile.

    If you want to allow those as input options, the program will need to be a little more complex to handle the prompting for the output destination or to send it to some destinations. It's just a matter of how you write the program.
    21,845 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: