How to block execute STRQM from command line

5 pts.
Tags:
AS/400 commands
iSeries security
Hi all, To improve security of my iSeries database, I want to block excute STRQM command from command line. How can I do that Thanks a lot

Answer Wiki

Thanks. We'll let you know when a new response is added.

Well STRQM is just an object so exclude authority to the command.
Enter wrkobj strqm then select option 5 to see the current authority.
Press F12 to back out then select option 2 to Edit authority.
Change Public to *EXCLUDE.

Note from the Edit Object Authority screen you can also press F6 to add individual users to use the command if you have any exceptions.

===================================================

Also, note STRQM menu option 10, Work with Query Manager profiles. This brings up a list of profiles that you can set for particular options. In particular, review option 2=Change for any profile.

Examine the elements that you can alter. Scroll to the end and check out ‘Select allowed SQL statements’ for Yes or No. This allows you to control which SQL statements may (or may not) be run by any of the profiles that you are authorized to.

You might want some profiles to have access to STRQM but only for SELECT statements — restricting UPDATE, DELETE, etc.

Tom

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following