TAA Tools
DLTSECTOOL      DELETE SECURITY TOOL                   TAASEFD

The Delete  Security Tool command  allows a  deletion of the  sensitive
security TAA  Tools (those that create or change  user profiles such as
INZPWD  and CPYUSRPRF2).   With proper  security in  place, these tools
may safely exist and be  used.  However, some installations  may prefer
to delete these tools to avoid any possibility of their use.

Deleting   security  sensitive   tools  does   not  absolve   you  from
understanding  your requirements  to provide  a secure  environment for
the  TAA  Productivity  Tools.     You  must  review  and  follow   the
guidelines  described  in   the  "TAA  Tool  Security"   discussion  of
HELPTAA.

DLTSECTOOL  only deletes  tools that  create  or change  user profiles.
There  are  many  other  tools  such  as  JOBACG  which  adopt  QSECOFR
authority, but do not create or change user profiles.

You must have both *ALLOBJ and *SECADM to use DLTSECTOOL.

A typical command would be:

            DLTSECTOOL    TOOL(INZPWD)

               or

            DLTSECTOOL    TOOL(*ALL)

TOOL(*ALL) deletes the following tools:

            CHGGRPPRF
            CHGOBJD4
            CHGINLMNU
            CHGINLPGM
            CHGUSRAUD2
            CHGUSRPRF2
            CHGUSRPRF3
            CHGUSRPWD
            CHG128PWD
            CHG128PWD2
            CHKLMTCPB
            CPYUSRPRF
            CPYUSRPRF2
            CPYUSRPRF3
            DLTDSAPRF
            DLTOLDUSR
            DLTGENPRF
            DLTUSRPRF2
            DLTUSRPRF3
            DSAOLDPRF
            DSAUSRPRF
            DSPPWD
            DSPUSRPRF2
            EDTUSRPRF
            ENAUSRPRF
            INZPWD
            RCLSYSPRF

If  one of  these  tools  is deleted,  a  user  with both  *ALLOBJ  and
*SECADM is  required to recreate the  tool if it is  needed (the rights
cannot be adopted).

Both  the command and  other objects that  make up a  tool are deleted.
If a  command library  exists  (such as  TAACMD), the  command is  also
deleted from the command library.

 DLTSECTOOL escape messages you can monitor for
 ----------------------------------------------

       TAA9892    Either the specific tool or no security tools exist

Escape messages from based on functions will be re-sent.

 Command parameters                                    *CMD
 ------------------

   TOOL          The tool name  to be deleted or *ALL  for all security
                 sensitive  tools.  Both the  command and other objects
                 that make  up  a  tool  are deleted.    If  a  command
                 library exists (such  as TAACMD), the command  is also
                 deleted from the command library.

                 If   *ALL  is  specified,  the   following  tools  are
                 deleted:

                      CHGGRPPRF
                      CHGINLMNU
                      CHGINLPGM
                      CHGUSRAUD2
                      CHGUSRPRF2
                      CHGUSRPRF3
                      CHGUSRPWD
                      CHKLMTCPB
                      CPYUSRPRF
                      CPYUSRPRF2
                      DLTGENPRF
                      DLTOLDUSR
                      DLTUSRPRF2
                      DLTUSRPRF3
                      DSAOLDPRF
                      DSAUSRPRF
                      DSPPWD
                      DSPUSRPRF2
                      EDTUSRPRF
                      ENAUSRPRF
                      INZPWD

                 A specific tool  from this list  may also be  deleted.

 Restrictions
 ------------

You must have  both *ALLOBJ and  *SECADM to use DLTSECTOOL  (the rights
cannot be adopted).

 Prerequisites
 -------------

The following TAA Tools must be on your system:

      CHKOBJ2         Check object 2
      DLTTAATOOL      Delete TAA Tool
      EDTVAR          Edit variable
      RTVSPCAUT       Retrieve special authority
      RTVTAALIC       Retrieve TAA license
      SNDCOMPMSG      Send completion message
      SNDESCMSG       Send escape message

 Implementation
 --------------

None, the tool is ready to use.

 Objects used by the tool
 ------------------------

    Object        Type    Attribute      Src member    Src file
    ------        ----    ---------      ----------    ----------

    DLTSECTOOL    *CMD                   TAASEFD       QATTCMD
    TAASEFDC      *PGM       CLP         TAASEFDC      QATTCL
					

Added to TAA Productivity tools October 15, 2001


Home Page Up to Top