I5 private Authorities
Ok after speaking with some of the IBM support people. I was told that we need to create user groups to minimize the Private Authorities issue we have. 1. How are groups created? 2. How will this help(how are authorities distributed among the users of said group)?
Software/Hardware used:
Software/Hardware used:
ASKED:
November 4, 2008 9:02 PM
UPDATED:
November 5, 2008 9:05 PM
Answer Wiki:
Not entirely sure what "private authority" issue you have since you did not elaborate on that but I'll give you the quick version of groups and authorities.
User "groups"..
Start with creating a user profile for the group. Give it a meaniful name and set the password to *NONE.
CRTUSRPRF USRPRF(GROUP1) PASSWORD(*NONE) TEXT('This is a group')
To assign users to that "group" you make some changes on the profiles for those users.
CHRUSRPRF USRPRF(JSMITH) GRPPRF(GROUP1) OWNER(*GRPPRF)
You can also assign users to groups through iSeries Navigator.. Pretty pictures and all that makes it a bit easier.
Authority - first assumption is that your user accounts do not have *ALLOBJ authority - because the idea is that you restrict authority by by making objects PUBLIC *EXCLUDE and then assigning authority to the group accounts either directly or through authorization lists.
Use the WRKOBJ command to see what authority has been set up for who on an object. That will also tell you if an authorization list has been set up over that object. The edit authority option lets you change whatever authority has been set up on the object.
Regards
Mike
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
