TAA Tools
CPYUSRPRF       COPY USER PROFILE                      TAASECH

The Copy  User Profile command  is intended to  allow a simple  command
method  of duplicating  a user  profile based  on an  existing profile.
The   command  would  normally  be  followed  by  the  system  supplied
CHGUSRPRF command,  the CHGUSRPRF2 TAA  Tool command  or the  EDTUSRPRF
TAA Tool command.

The system  supports a  similar function, but  it can only  be executed
interactively.

A typical command would be entered as:

         CPYUSRPRF    FROMUSRPRF(USER1)  TOUSRPRF(USER2)
                        TEXT('User 2 text')

The  TOUSRPRF  would be  created  using  RTVUSRPRF to  extract  the the
existing attributes of the FROMUSRPRF with the exception of:

      TEXT       It is taken from the CPYUSRPRF command parameter
      PASSWORD   The CRTUSRPRF default of *USRPRF is used
      DOCPWD     The CRTUSRPRF default of *USRPRF is used
      MSGQ       The CRTUSRPRF default of *USRPRF is used

Auditing values are copied using the CHGUSRAUD command.

After creating  the  user profile,  CHGOBJOWN  is  used to  change  the
owner to QSECOFR.   The CPYUSRPRF user  retains all rights to  the user
profile.   Changing  to QSECOFR  as the  owner is  done to  prevent the
problem in a disaster  recovery situation where the  name of the  owner
of the profile comes  later in the alphabet than the  user profile that
was created.   System profiles are restored first  followed by the user
created  profiles in alphabetical  order.  If  user BBB creates profile
AAA, the AAA user profile  is restored without BBB being on  the system
and the owner would become QDFTOWN.

TAASECHC2 program
-----------------

The  TAASECHC2  program  adopts  the  authority  of  QSECOFR  and  uses
CHGUSRPRF  and  CHGUSRAUD  to change  the  group  profile  and auditing
parameters.  The program may only be called by TAASECHC in TAATOOL.

Adopting the QSECOFR  profile avoids  problems where  the user  issuing
the command  is not  properly authorized  to the  group profile of  the
From user profile or does not have the *AUDIT special authority.

Command parameters                                    *CMD
------------------

   FROMUSRPRF    The from user profile to be used as a base.

   TOUSRPRF      The new profile to be created.

   TEXT          The  text   description  of  the  new  profile  to  be
                 created.

   OWNER         Who  the  owner   of  any  objects   created  by   the
                 FROMUSRPRF user profile should be.

                 *USRPRF is  the default meaning  any objects  would be
                 owned by the FROMUSRPRF.

                 *GRPPRF  may be  entered to  mean any  objects created
                 would  be owned  by the  group profile.   To  use this
                 option, the  FROMUSRPRF user  must  be a  member of  a
                 group profile.

Modifying the program for logging or sending to another system
--------------------------------------------------------------

One of  the purposes  of CPYUSRPRF is  that it can  be used  to capture
the  CRTUSRPRF used  and  log or  send the  command to  another system.
The typical method  of doing this  would be to  send the command  using
SBMRMTCMD.  You must modify the TAASECHC program to do this.

See the  instructions at  about statement 235  within TAASECHC  for how
to modify the code.

To  modify the  source you  would use a  similar approach  to modifying
any TAA Tool  source.   See the  discussion with  the CRTTAASRCF  tool.
When the source  is modified, use  the CRTTAATOOL command to  create or
re-create the tool specifying your source library.

Restrictions
-------------

The  user of the  command must  be authorized  to the FROM  profile and
must  be authorized  to create a  new user profile.   If  you are using
SBMRMTCMD, see the discussion  of DDM considerations with the  TAA tool
CHGUSRPWD.

Typically this  means the  user must have  *ALLOBJ and  *SECADM special
authority.   You  may  use CPYUSRPRF  in a  CL  program that  adopts an
*ALLOBJ  user   profile   and   authorize  the   program   to   trusted
individuals.

Some attributes such as described previously are not copied.

Prerequisites
-------------

The following TAA Tools must be on your system.

     CHKAPOST     Check apostrophes
     EXPVAL       Expand value
     SNDCOMPMSG   Send completion message

Implementation
--------------

None, the tool is ready to use.

Objects used by the tool
------------------------

   Object        Type        Attribute      Src member    Src file
   ------        ----        ---------      ----------    ----------

   CPYUSRPRF     *CMD                       TAASECH       QATTCMD
   TAASECHC      *PGM           CLP         TAASECHC      QATTCL
   TAASECHC2     *PGM           CLP         TAASECHC2     QATTCL
					

Added to TAA Productivity tools April 1, 1995


Home Page Up to Top