If you do not have the *secadmin authority and want to change some parameters of the system which needs the secadmin authority. If you know any user profile with sec admin authority you can submit the job with that user profile name and user can grant himself any authority he desires.
This can be used both in a positive and negative way depending on the user.
SBMJOB CMD(CHGUSRPRF USRPRF(TOMSON) SPCAUT(*ALLOBJ *JOBCTL)) USER(XXXXXX)
Where XXXXX stands for user profile name which is having *secofr authority.
MORE INFORMATION ON THIS TOPIC
The Best Web Links: Tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Read this Search400 Featured Topic: Secure your iSeries