- If I have users with *ALLOBJ, but no access to command line:
How does the user access those *any* objects on the server or app? How is the risk materializing? If I look at a client's screen and they say: "yeah I have allobj but see? I don't have a CL and my menu shows only 2-3 options.. So how do you think I'd access all of the objects on the server even though I have *ALLOBJ? "
Do you agree that that user could also manage to get a CL?