Limit Security Officer (QLMTSECOFR)
The Limit Security Officer (QLMTSECOFR) system value controls whether a user with all-object (*ALLOBJ) or service (*SERVICE) special authority can sign on to any workstation. Limiting powerful user profiles to certain well-controlled workstations provides security protection.
The QLMTSECOFR system value is only enforced at security level 30 and higher. Workstations provides more information about the authority required to sign on at a workstation.
You can always sign on at the console with the QSECOFR, QSRV, and QSRVBAS profiles, no matter how the QLMTSECOFR value is set.
Note: This system value is a restricted value. See Security
system values for details on how to restrict changes to security system
values and a complete list of the restricted system values.
| Value | Description |
|---|---|
| 1 | A user with *ALLOBJ or *SERVICE special authority can sign on at a workstation only if that user is specifically authorized (that is, given *CHANGE authority) to the workstation or if user profile QSECOFR is authorized (given *CHANGE authority) to the workstation. This authority cannot come from public authority. |
| 0 | Users with *ALLOBJ or *SERVICE special authority can sign on at any workstation for which they have *CHANGE authority. They can receive *CHANGE authority through private or public authority or because they have *ALLOBJ special authority. |
Recommended value: 1 (Yes)