To prevent specific users from
seeing the System Request menu, specify: GRTOBJAUT OBJ(QSYS/QGMNSYSR)OBJTYPE(*PNLGRP)
USER(USERA)AUT(*EXCLUDE)
A user can use the system request
function to suspend the current job and display the System Request Menu. The
System Request Menu allows the user to send and display messages, transfer to a
second job, or end the current job. This might represent a security exposure
because the public authority to the System Request Menu is *USE when a system
is shipped.
To call up the System Request menu:
1.Press the Sys Req key
to show key an input line at the bottom of the display.
2.Press Enter to show the System Request
Menu.
Each time the System Request key is
pressed, the system automatically changes the current user profile of the job
to the initial user profile of the job. This is done so that the user does not
have any additional authority on the System Request menu or in the Presystem
Request Program exit program. After the System Request function is completed,
the current user profile of the job is returned to the value that it was before
the System Request key was pressed.
From the System Request menu enter an
option 1 to display the signon for a secondary job (Job B in this
example). The original job (Job A in this example) is suspended during the time
Job B is processed.
If the operator presses Sys Req and
picks option 1, Job B is suspended and Job A is continued from the point it was
suspended.
Thus, the operator can jump between two
jobs, processing one while the other is suspended.
When the operator signs off one job
(either one) the other job is given control to continue processing.
Restricting
the use of system request menu options
Any of the options can be restricted by removing public
authority to the associated command.
You can prevent users from selecting
specific options from the System Request Menu by restricting the authority to
the associated commands
