Q
Manage Learn to apply best practices and optimize your operations.

Changing user profile authorities

One Search400.com member writes, "When changing a user profile CHGUSRPRF USRPRF(PERSON) SUPGRPPRF(PERSONALLO), when does the authorities of the supplemental group PERSONALLO go into affect for user PERSON? In this case PERSONALLO has *ALLOBJ special authority. I have found that if user PERSON is already signed on, and then that change is made to add the supplemental group, user PERSON has to sign off and back on again for the OS to recognize that PERSON has group PERSONALLO authorities. I was thinking maybe the group information from the PERSON user profile is cached in user PERSON's interactive session job, so the OS doesn't pickup the new group until PERSON signs off?"

When changing a user profile CHGUSRPRF USRPRF(PERSON) SUPGRPPRF(PERSONALLO), when does the authorities of the supplemental group PERSONALLO go into affect for user PERSON? In this case PERSONALLO has *ALLOBJ special authority. I have found that if user PERSON is already signed on, and then that change is made to add the supplemental group, user PERSON has to sign off and back on again for the OS to recognize that PERSON has group PERSONALLO authorities. I was thinking maybe the group information from the PERSON user profile is cached in user PERSON's interactive session job, so the OS doesn't pickup the new group until PERSON signs off?
Changes to a user's group, supplemental group, special authorities and limited capabilities attributes all require that the user sign off and sign back on.

Dig Deeper on iSeries system and application security

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchDataCenter

Close