The limit capabilities on the AS/400 profile overrides anything
specified in the JDE set up. This applies to just about everything -
AS/400 set ups always take precedence over JDE set ups.
If a user has limited capabilities then the subset of commands they can
use is very small. They get the basics like WRKSBMJOB, WRKSPLF, etc.
Somewhere in the IBM materials there is a very succinct explanation
which you should locate. There might even be some good details if you
use F1 on this field on the user profile itself (you will need WRKUSRPRF
or DSPUSRPRF capabilities to get there).
Apart from the command line access thing - if you have deep concerns
about user access then look at the Hidden Selections and Fastpath
commands in JDE. There are two, which in my experience, often cause
some problems. These allow the user access by default to WRKSBMJOB and
WRKJOBQ which they can then use to change job attributes like priority,
JOBQ etc. Where it has been a problem I have used AS/400 object
authority functions to stop general users doing anything with CHGJOB
etc. Result - the users get to use the standard JDE HS and FP but then
can't go much further.
Regards,
Colin
