Troubleshooting
Problem
This document describes how to secure the system request (SYSREQ) menu.
Resolving The Problem
Is it possible to secure some of the options in the SYS REQ menu? Is it possible to prevent users from bringing up the SYS REQ menu at all?
Answer:
If users do not want to use SYS REQ, on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) +
USER(*PUBLIC) AUT(*EXCLUDE)
Press the Enter key.
If, after running the above command, you want a user to use SYS REQ (in the example below, we will assume that we want SMITH to use SYS REQ), on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) +
USER(SMITH) AUT(*USE)
Press the Enter key.
Suppose you want to secure Option 1 only from the SYS REQ menu. The commands behind the SYS REQ options are shown below:
1. Display sign on for alternative job . . . . . . . TFRSECJOB
2. End previous request . . . . . . . . . . . . . . .ENDRQS
3. Display current job. . . . . . . . . . . . . . . .DSPJOB
4. Display messages . . . . . . . . . . . . . . . . .DSPMSG
5. Send a message . . . . . . . . . . . . . . . . . .SNDMSG
6. Display system operator messages. . . . . . . . .DSPMSG QSYSOPR
7. Display work station user. . . . . . . . . . . . .DSPWSUSR
80. Disconnect job. . . . . . . . . . . . . . . . . .DSCJOB
90. Sign off . . . . . . . . . . . . . . . . . . . .SIGNOFF
The command performed by Option 1 is TFRSECJOB. To keep most users from using Option 1, on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/TFRSECJOB) OBJTYPE(*CMD) +
USER(*PUBLIC) AUT(*EXCLUDE)
Press the Enter key.
Again, having run the above command, to allow SMITH to use TFRSECJOB, on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/TFRSECJOB) OBJTYPE(*CMD) +
USER(SMITH) AUT(*USE)
Press the Enter key.
Answer:
If users do not want to use SYS REQ, on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) +
USER(*PUBLIC) AUT(*EXCLUDE)
Press the Enter key.
If, after running the above command, you want a user to use SYS REQ (in the example below, we will assume that we want SMITH to use SYS REQ), on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) +
USER(SMITH) AUT(*USE)
Press the Enter key.
Suppose you want to secure Option 1 only from the SYS REQ menu. The commands behind the SYS REQ options are shown below:
1. Display sign on for alternative job . . . . . . . TFRSECJOB
2. End previous request . . . . . . . . . . . . . . .ENDRQS
3. Display current job. . . . . . . . . . . . . . . .DSPJOB
4. Display messages . . . . . . . . . . . . . . . . .DSPMSG
5. Send a message . . . . . . . . . . . . . . . . . .SNDMSG
6. Display system operator messages. . . . . . . . .DSPMSG QSYSOPR
7. Display work station user. . . . . . . . . . . . .DSPWSUSR
80. Disconnect job. . . . . . . . . . . . . . . . . .DSCJOB
90. Sign off . . . . . . . . . . . . . . . . . . . .SIGNOFF
The command performed by Option 1 is TFRSECJOB. To keep most users from using Option 1, on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/TFRSECJOB) OBJTYPE(*CMD) +
USER(*PUBLIC) AUT(*EXCLUDE)
Press the Enter key.
Again, having run the above command, to allow SMITH to use TFRSECJOB, on the operating system command line type the following:
GRTOBJAUT OBJ(QSYS/TFRSECJOB) OBJTYPE(*CMD) +
USER(SMITH) AUT(*USE)
Press the Enter key.
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.1.0"}]
Historical Number
8285953
Was this topic helpful?
Document Information
Modified date:
17 September 2020
UID
nas8N1010165