Page 1 of 1
Changing Object Authority of PUIKEY
Posted: Thu Feb 13, 2014 11:54 am
by thutcheson
Once the Profound license keys are applied they are basically open for anyone to change.
It appears *PUBLIC has *CHANGE authority by default. Can this be changed to *USE for *PUBLIC or for anyone else?
Would this have an adverse affect on the Profound UI?
Re: Changing Object Authority of PUIKEY
Posted: Thu Feb 13, 2014 12:02 pm
by David
I've reviewed the processing, and I don't believe that this will cause any harm.
Our processing that creates the license key data area does not actually set public *CHANGE permission on it. I can see that after it's created, our processing runs GRTOBJAUT command to set public *USE permission on it. So I'm thinking that this setting has gotten on there in some other way. Profound UI programs need to simply read the data area contents, not change it. Aside from the Key Management app, of course.
So, I think you're fine to do that, but of course I'd recommend trying on your test server/partition (if possible) and then rolling out in a production in a controlled way.