The Convert User Profile 2 command converts the DSPUSRPRF outfile
(model file is QADSPUPB) to an externally described file containing
all of the fields in the QADSPUPB format plus individual fields for
each of the special authorities, each of the supplemental groups,
etc. Some selection capability exists. This allows a simple query
to use the individual fields for analysis.
You must have *ALLOBJ special authority to use CVTUSRPRF2.
The model file is TAASEGPP with a format name of USRPRFR.
A typical command would be:
CVTUSRPRF2 USRPRF(*ALL) OUTLIB(xxx)
All of the user profiles would first be converted to an outfile in
QTEMP. The QTEMP version would be read and the USRPRFP2 outfile
would be created in the named library.
A query could then be written to analyze the file.
Writing a query
---------------
The model file QADSPUPB supports a single field (UPSPAU) of 150 bytes
in length where each 10 positions can contain one of the special
authorities such as *ALLOBJ, *JOBCTL, etc. There is no specific
order for how the special values appear so that the *ALLOBJ right may
not always be in the same positions. You can do a 'contains'
function for this value, but processing the values can be awkward or
impossible with many queries.
The CVTUSRPRF2 function makes unique fields out of the special values
to simplify writing a query. For example, the UPALLO field will have
an X if the user has the *ALLOBJ right. The UPSPAU field containing
all of the rights is also included.
Several other fields exist in the QADSPUPB model file for the system
to place a list of items such as the the Supplemental Groups field
UPSUPG. The system allows up to 15 supplemental groups and the
UPSUPG field is 150 bytes in length where each group takes 10 bytes.
There is no specific order as to how the group names appear in the
field. CVTUSRPRF2 makes unique fields for each of the possible 15
fields.
Additional fields added to USRPRFP2
-----------------------------------
You may display the CVTUSRPRF2 format with:
DSPFMT TAASEGPP
** The Special Authorities field (UPSPAU) exists along with
individual fields UPALLO (*ALLOBJ), UPJOBC (*JOBCTL), etc.
Each field will have a value of X or blank.
** The User Options field (UPUSOP) has additional individual
fields UPUS01-UPUS24. Each field will contain one user
option.
** The Action Auditing field (UPAUDL) has additional individual
fields UPAU01-UPAU64. Each field will contain one auditing
value.
** The Supplemental Group field (UPSUPG) has additional
individual fields UPSU01-UPSU15. Each field will contain one
supplemental group.
** The Local Job Attributes field (UPSETJ) has additional
individual fields UPSE01-UPSE16. Each field will contain one
locale job attribute.
CVTUSRPRF2 escape messages you can monitor for
----------------------------------------------
None. Escape messages from based on functions will be re-sent.
CVTUSRPRF2 command parameters *CMD
-----------------------------
USRPRF The name or generic name of the user profiles to be
converted. *ALL may be specified for all profiles.
PWDNONE A *YES/*NO parameter for whether to select the user
profiles that have no password.
*NO is the default to consider all profiles.
*YES may be specified select only those profiles the
have their password set to *NONE.
PWDEXP A *YES/*NO parameter for whether to select the user
profiles that have their password expired.
*NO is the default to consider all profiles.
*YES may be specified so select only those profiles
the have an expired password.
SPCAUT The list of special authorities to select. *NO is
the default meaning the special authorities are not
considered.
*ALL may be specified to select those profiles that
have all special authorities.
One or more of the special authorities *SAVSYS,
*JOBCTL, *SECADM, *ALLOBJ, *SERVICE, *SPLCTL,
*AUDIT, or *IOSYSCFG may be specified.
GRPMBR Whether to select those user profiles that are
members of a specific group.
*NONE is the default to not consider if the user is
a member of a group.
The name of the group profile may be entered to
select those members of the group. The GRPPRF
parameter of the user profile specifies this name.
GRPPRF A *YES/*NO parameter for whether to select those
user profiles who are group profiles.
*NO is the default to not consider if the user is a
group profile.
*YES may be specified to select those user profiles
that are group profiles. This means the user
profile has been named in the GRPPRF parameter of
some other user profile.
OUTLIB The library in which the USRPRFP2 file will be
placed. The default is *LIBL. If the USRPRFP2 file
does not already exist, a library must be specified.
OUTMBR The member of the USRPRFP2 file to be used. If the
member does not exist, it is added. The default is
USRPRFP2.
REPLACE A *YES/*NO value for whether the member should be
cleared before writing records into it. The default
is *YES.
*NO may be specified to add records to existing
data.
Restrictions
------------
You must have *ALLOBJ special authority to use CVTUSRPRF2.
Prerequisites
-------------
The following TAA Tools must be on your system:
CHKALLOBJ Check *ALLOBJ special authority
DUPTAADBF Duplicate TAA data base file
EDTVAR Edit variable
RTVSYSVAL3 Retrieve system value 3
SNDCOMPMSG Send completion message
SNDESCINF Send escape information
SNDESCMSG Send escape message
SNDSTSMSG Send status message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
CVTUSRPRF2 *CMD TAASEGP QATTCMD
TAASEGPC *PGM CLP TAASEGPC QATTCL
TAASEGPR *PGM RPG TAASEGPR QATTRPG
TAASEGPP *FILE PF TAASEGPP QATTDDS
|
