RPGIV @ Work

A unique site for RPG and System i Lovers

Welcome!

Hi, this site will provide all what you need in System i and RPG developments.

My Name is Chamara Withanachchi, System i Expert and RPG Developer. And in the field for last 11 years.

I hope you will find lot of valuable information from this site

Adopted Authority Print E-mail
User Rating: / 1
PoorBest 
Written by Chamara Withanachchi   

Adopted authority lets you temporarily grant users the capability to perform a task without assigning them the authority permanently. If you blindly compile programs owned by QSECOFR or some other profile without examining them to determine their function, then yes, adopted authority can be very dangerous and can be used to subvert the security on your system. However, by default, not just anyone can compile a program that adopts a powerful profile. Used carefully, adopted authority can eliminate the number of users required to have special authorities. For example, many IBM i clients write utilities—CL programs that adopt a profile having *ALLOBJ and *SECADM special authorities—to perform password resets. This way, the help desk can reset passwords when users forget them, but help desk personnel don’t need to have special authorities or be specifically authorized to the profiles to perform the task.

<Previous   Next>