ACS Run SQL Script - Block users with CHGFCNUSG Option Merged

Ideally we would like to use the existing WRKFCNUSG entries to limit this access by specific user ID's

reasoning: There may be instances where a particular person may install ACS without the registration entries in Windows required to block it at that level.



Additionally the block would not be desired on all partitions (example: a Developer would need ODBC access to a Development partition but not a Production partition.)



There is an existing support document: https://www.ibm.com/support/pages/restrict-users-accessing-functions-access-client-solutions-acs - Restrict Users from Accessing Functions in Access Client Solutions (ACS) (ibm.com) that explains the process.



However, this process does not appear to work at all with ACS regardless of the settings being changed on the QIBM_XE1_ODBC entry. We have tried testing this on multiple IBMi 7.4 (TR4 & TR5) partitions with no success.



Is there a way to limit access from the partition level that does indeed work..

We need to block selected users from using the RUN SQL Scripts on some systems but allow them on others so we do not want to eliminate the option from their emulator as they may need to use this on a NON Prod system but be restricted on a PROD system. We would like an option in CHGFCNUSG to be able to restrict users from executing queries using this interface