Too much authority on IFS, need to adjust authority levels

pts.
Tags:
Security
On the IFS I have objects that users have too much authority, I have added Authority lists to the folders, with lower authority levels, but now I need to remove the individual users from the folders and objects. Is there a way to do this at a folder level, that will automatically change the objects, without having to touch each object?

Answer Wiki

Thanks. We'll let you know when a new response is added.

One possibility:

==> CHGAUT OBJ(‘/home/mydir/*’) USER(*PUBLIC) DTAAUT(*RX) OBJAUT(*NONE)

This uses a generic OBJ() value to indicate that every object within the /home/mydir path will receive the new settings.

Also, note that authority to bojects within a directory might be irrelevant if the authority to the directory itself is removed. I.e., if you are excluded from a directory, you are implicitly excluded from everything inside of the directory. That can help simplify some settings.

Also, consider using a QShell script. Use the ‘ls’ utility to build a list of objects. Pipe that list through ‘sed’ to filter things out that you want excluded. Pipe results from sed into the ‘system’ utility to execute the CHGAUT command or into the ‘chgrp’, ‘chmod’, ‘chown’ or other utility.

Various possibilities depending on how many different users, how many directories, what authorities exist along the path, what OS/400 options you have installed, etc.

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following