CPYUSRPRF COPY USER PROFILE TAASECH |
The Copy User Profile command is intended to allow a simple command
method of duplicating a user profile based on an existing profile.
The command would normally be followed by the system supplied
CHGUSRPRF command, the CHGUSRPRF2 TAA Tool command or the EDTUSRPRF
TAA Tool command.
The system supports a similar function, but it can only be executed
interactively.
A typical command would be entered as:
CPYUSRPRF FROMUSRPRF(USER1) TOUSRPRF(USER2)
TEXT('User 2 text')
The TOUSRPRF would be created using RTVUSRPRF to extract the the
existing attributes of the FROMUSRPRF with the exception of:
TEXT It is taken from the CPYUSRPRF command parameter
PASSWORD The CRTUSRPRF default of *USRPRF is used
DOCPWD The CRTUSRPRF default of *USRPRF is used
MSGQ The CRTUSRPRF default of *USRPRF is used
Auditing values are copied using the CHGUSRAUD command.
After creating the user profile, CHGOBJOWN is used to change the
owner to QSECOFR. The CPYUSRPRF user retains all rights to the user
profile. Changing to QSECOFR as the owner is done to prevent the
problem in a disaster recovery situation where the name of the owner
of the profile comes later in the alphabet than the user profile that
was created. System profiles are restored first followed by the user
created profiles in alphabetical order. If user BBB creates profile
AAA, the AAA user profile is restored without BBB being on the system
and the owner would become QDFTOWN.
TAASECHC2 program
-----------------
The TAASECHC2 program adopts the authority of QSECOFR and uses
CHGUSRPRF and CHGUSRAUD to change the group profile and auditing
parameters. The program may only be called by TAASECHC in TAATOOL.
Adopting the QSECOFR profile avoids problems where the user issuing
the command is not properly authorized to the group profile of the
From user profile or does not have the *AUDIT special authority.
Command parameters *CMD
------------------
FROMUSRPRF The from user profile to be used as a base.
TOUSRPRF The new profile to be created.
TEXT The text description of the new profile to be
created.
OWNER Who the owner of any objects created by the
FROMUSRPRF user profile should be.
*USRPRF is the default meaning any objects would be
owned by the FROMUSRPRF.
*GRPPRF may be entered to mean any objects created
would be owned by the group profile. To use this
option, the FROMUSRPRF user must be a member of a
group profile.
Modifying the program for logging or sending to another system
--------------------------------------------------------------
One of the purposes of CPYUSRPRF is that it can be used to capture
the CRTUSRPRF used and log or send the command to another system.
The typical method of doing this would be to send the command using
SBMRMTCMD. You must modify the TAASECHC program to do this.
See the instructions at about statement 235 within TAASECHC for how
to modify the code.
To modify the source you would use a similar approach to modifying
any TAA Tool source. See the discussion with the CRTTAASRCF tool.
When the source is modified, use the CRTTAATOOL command to create or
re-create the tool specifying your source library.
Restrictions
-------------
The user of the command must be authorized to the FROM profile and
must be authorized to create a new user profile. If you are using
SBMRMTCMD, see the discussion of DDM considerations with the TAA tool
CHGUSRPWD.
Typically this means the user must have *ALLOBJ and *SECADM special
authority. You may use CPYUSRPRF in a CL program that adopts an
*ALLOBJ user profile and authorize the program to trusted
individuals.
Some attributes such as described previously are not copied.
Prerequisites
-------------
The following TAA Tools must be on your system.
CHKAPOST Check apostrophes
EXPVAL Expand value
SNDCOMPMSG Send completion message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
CPYUSRPRF *CMD TAASECH QATTCMD
TAASECHC *PGM CLP TAASECHC QATTCL
TAASECHC2 *PGM CLP TAASECHC2 QATTCL
|
Added to TAA Productivity tools April 1, 1995