When changing a user profile CHGUSRPRF USRPRF(PERSON) SUPGRPPRF(PERSONALLO), when does the authorities of the supplemental group PERSONALLO go into affect for user PERSON? In this case PERSONALLO has *ALLOBJ special authority. I have found that if user PERSON is already signed on, and then that change is made to add the supplemental group, user PERSON has to sign off and back on again for the OS to recognize that PERSON has group PERSONALLO authorities. I was thinking maybe the group information from the PERSON user profile is cached in user PERSON's interactive session job, so the OS doesn't pickup the new group until PERSON signs off?
Changes to a user's group, supplemental group, special authorities and limited capabilities attributes all require that the user sign off and sign back on.
Dig Deeper on iSeries system and application security
Before changing password levels and upgrading operating systems on the AS/400, ensure the clients connecting to the NetServer do not need the old ...
Look in the audit journal (QAUDJRN) on the AS/400 for an authority failure message with the name of the library as the object name. Use the ...
The UPPWEI field corresponds to the password expiration interval field, and its values "0" and "-1" represent the *SYSVAL and *NOXMAX commands.
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.