Comments on: *ALLOBJ

By: TomLiotta

TomLiotta — Wed, 31 Oct 2012 22:12:46 +0000

@Hassan: I apologize for reading it wrong. An *AUTL name is appropriate and will likely be used as part of the resolution. — Tom

By: chalenger

chalenger — Wed, 31 Oct 2012 19:31:57 +0000

For new created objects:it is there

chglib (libname) crtaut(autl name)

Hassan

By: TomLiotta

TomLiotta — Wed, 31 Oct 2012 10:58:21 +0000

…the exact hirerachy of authority in which our OS will search.

I’m not sure what is meant by “hierarchy”. There is a sequence that authority checking follows. You can study the authority checking flowcharts in the How the system checks authority topic. The surrounding topics give extra detail.

The appropriate ways that your authority might be set will involve a combination of some of those elements. It’s not clear what might be done for you yet.

Tom

By: IBMiserver

IBMiserver — Wed, 31 Oct 2012 10:26:17 +0000

Thanks toms.Can you please tell me the exact hirerachy of authority in which our OS will search.

By: TomLiotta

TomLiotta — Wed, 31 Oct 2012 08:08:14 +0000

For the existing objects : you have to grant auth. for all of the to that user.

That’s already known. Part of the question is how to do it.

The best answer might be determined after more is known about newly created objects because the authorities will all need to be consistent. One thing we can be sure of is that authority should not be assigned for each individual object.

For new created object: you have to create AUTL(autl), edit AUTL which grant the user for authority needed then chglib crtaut(autl)

That would be a good possibility. Unfortunately, the CHGLIB CRTAUT() parameter doesn’t allow “autl” as a value.

Tom

By: chalenger

chalenger — Wed, 31 Oct 2012 06:58:50 +0000

For the existing objects : you have to grant auth. for all of the to that user.For new created object: you have to create AUTL(autl), edit AUTL which grant the user for authority needed then chglib crtaut(autl) -Hassan

By: TomLiotta

TomLiotta — Tue, 30 Oct 2012 12:05:54 +0000

Handling the existing libraries and objects isn’t difficult. But the requirement for unknown new objects can be tricky. Why are new objects created? What are the circumstances? And why does this one profile need authority to all of them? Some procedural background might suggest an appropriate method for the future. — Tom