|
Adopted authority has nothing to do with the authority a user needs to sign
on the system. When a profile is created, OS/400 grants *CHANGE plus
*OBJMGT authority to the profile itself. That authority should NOT be
removed or altered. When a user is made a member of a group profile, OS/400
grants the user profile the following authorities to the group profile:
*OBJOPR, *OBJMGT, *READ, *ADD, *UPDATE, *DELETE (note - authority to the
group does NOT include *EXECUTE.) It sounds like one of these two
authorities has been removed or altered. I would check and, if necessary,
set the authorities to the values listed above. ==================================
MORE INFORMATION ON THIS TOPIC
==================================
The Best Web Links: tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Check out this Search400.com Featured Topic: Top ten security tips
|