5 pts.
 How to block execute STRQM from command line
Hi all, To improve security of my iSeries database, I want to block excute STRQM command from command line. How can I do that Thanks a lot

Software/Hardware used:
ASKED: February 2, 2010  8:49 PM
UPDATED: February 3, 2010  2:53 AM

Answer Wiki:
Well STRQM is just an object so exclude authority to the command. Enter wrkobj strqm then select option 5 to see the current authority. Press F12 to back out then select option 2 to Edit authority. Change Public to *EXCLUDE. Note from the Edit Object Authority screen you can also press F6 to add individual users to use the command if you have any exceptions. =================================================== Also, note STRQM menu option 10, Work with Query Manager profiles. This brings up a list of profiles that you can set for particular options. In particular, review option 2=Change for any profile. Examine the elements that you can alter. Scroll to the end and check out 'Select allowed SQL statements' for Yes or No. This allows you to control which SQL statements may (or may not) be run by any of the profiles that you are authorized to. You might want some profiles to have access to STRQM but only for SELECT statements -- restricting UPDATE, DELETE, etc. Tom
Last Wiki Answer Submitted:  February 3, 2010  2:53 am  by  Whatis23   5,665 pts.
All Answer Wiki Contributors:  Whatis23   5,665 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _