79 lines
4.8 KiB
HTML
79 lines
4.8 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
|||
|
|
<!DOCTYPE html
|
|||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|||
|
|
<html lang="en-us" xml:lang="en-us">
|
|||
|
|
<head>
|
|||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|||
|
|
<meta name="security" content="public" />
|
|||
|
|
<meta name="Robots" content="index,follow" />
|
|||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|||
|
|
<meta name="DC.Type" content="concept" />
|
|||
|
|
<meta name="DC.Title" content="Monitor user environments" />
|
|||
|
|
<meta name="abstract" content="This article discusses using the SECBATCH menu and commands to monitor user environments." />
|
|||
|
|
<meta name="description" content="This article discusses using the SECBATCH menu and commands to monitor user environments." />
|
|||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvmonitorauth.htm" />
|
|||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|||
|
|
<meta name="DC.Format" content="XHTML" />
|
|||
|
|
<meta name="DC.Identifier" content="monitoruserenviron" />
|
|||
|
|
<meta name="DC.Language" content="en-us" />
|
|||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|||
|
|
<!-- US Government Users Restricted Rights -->
|
|||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|||
|
|
<title>Monitor user environments</title>
|
|||
|
|
</head>
|
|||
|
|
<body id="monitoruserenviron"><a name="monitoruserenviron"><!-- --></a>
|
|||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|||
|
|
<h1 class="topictitle1">Monitor user environments</h1>
|
|||
|
|
<div><p>This article discusses using the SECBATCH menu and commands to
|
|||
|
|
monitor user environments.</p>
|
|||
|
|
<p>One role of the user profile is to define the environment for the user,
|
|||
|
|
including the output queue, the initial menu, and the job description. The
|
|||
|
|
user’s environment affects how the user sees the system and, to some extent,
|
|||
|
|
what the user is allowed to do. The user must have authority to the objects
|
|||
|
|
that are specified in the user profile. However, if your authority scheme
|
|||
|
|
is still in progress or is not very restrictive, the user environment that
|
|||
|
|
is defined in a user profile may produce results that you do not intend.</p>
|
|||
|
|
<div class="p">Use the following SECBATCH menu options to monitor user environments: <kbd class="userinput">29</kbd> to
|
|||
|
|
submit the job immediately and <kbd class="userinput">68</kbd> to use the job scheduler:<ul><li>The user’s job description may specify a user profile that has more authority
|
|||
|
|
than the user.</li>
|
|||
|
|
<li>The user may have an initial menu that does not have a command line. However,
|
|||
|
|
the user’s attention-key-handling program may provide a command line.</li>
|
|||
|
|
<li>The user may be authorized to run confidential reports. However, the user’s
|
|||
|
|
output may be directed to an output queue that is available to users who should
|
|||
|
|
not see the reports.</li>
|
|||
|
|
</ul>
|
|||
|
|
</div>
|
|||
|
|
<p>You can use the *ENVINFO option of the Print User Profile (PRTUSRPRF) command
|
|||
|
|
to help you monitor the environments that are defined for system users. The
|
|||
|
|
following figure shows an example of the report:</p>
|
|||
|
|
<div class="figtopbot"><span class="figcap">Figure 1. Print User Profile: User
|
|||
|
|
Environment Report</span><pre> User Profile Information
|
|||
|
|
|
|||
|
|
Report type . . . . . . . . . : *ENVINFO
|
|||
|
|
Select by . . . . . . . . . . : *USRCLS
|
|||
|
|
Initial Initial Job Message Output Attention
|
|||
|
|
User Current Menu/ Program/ Description/ Queue/ Queue/ Program/
|
|||
|
|
Profile Library Library Library Library Library Library Library
|
|||
|
|
AUDSECOFR AUDITOR MAIN *NONE QDFTJOBD QSYSOPR *WRKSTN *SYSVAL
|
|||
|
|
*LIBL QGPL QSYS
|
|||
|
|
USERA *CRTDFT OEMENU *NONE QDFTJOBD USERA *WRKSTN *SYSVAL
|
|||
|
|
*LIBL QGPL QUSRSYS
|
|||
|
|
USERB *CRTDFT INVMENU *NONE QDFTJOBD USERB *WRKSTN *SYSVAL
|
|||
|
|
*LIBL QGPL QUSRSYS
|
|||
|
|
USERC *CRTDFT PAYROLL *NONE QDFTJOBD USERC PAYROLL *SYSVAL
|
|||
|
|
*LIBL QGPL QUSRSYS PRPGMLIB</pre>
|
|||
|
|
</div>
|
|||
|
|
<p>For more information, see: <a href="rzamvmonitorsecmsg.htm#monitorsecmsg">Monitor
|
|||
|
|
security messages</a>.</p>
|
|||
|
|
</div>
|
|||
|
|
<div>
|
|||
|
|
<div class="familylinks">
|
|||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvmonitorauth.htm" title="This topic provides basic suggestions for monitoring the effectiveness of the security safeguards on your system.">Monitor authority</a></div>
|
|||
|
|
</div>
|
|||
|
|
</div>
|
|||
|
|
</body>
|
|||
|
|
</html>
|