Query Security

190 pts.
Tags:
RPG
RPGLE
Security
I have written several queries which I don't want others to change. I edited the authority for this query and changed the object authority to *EXCLUDE for user *PUBLIC and all other authorized users. However, users are still able to access and change my queries. Why? What do I need to do?

Answer Wiki

Thanks. We'll let you know when a new response is added.

Couple of things jump right to mind:

- By chance, do these users have the *ALLOBJ special authority in their profile, or belong to a group that does? If so, that trumps any other authority rules you may be trying to implement.

- How are they accessing these queries? By chance, would it be from a CL that runs with adopted authority, or within some sort of program menu structure that utilizes adopted authority, a la BPCS or Jack Henry? If so, that might be running as some other user that the one you think.

Just the first two things that come to mind.

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Tellme
    Either of the two scenarios Carter mentioned is likely. If you have adopted authority where *ALLOBJ. Best to track when you query was run and by what CurUser. Might try checking QHST. Also check how your query is invoked. You may have someone else that borrowed it but had *ALLOBJ in their code.
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following