Group functions and special authorities in AS/400

Tags:
AS/400
AS/400 group profiles
What is the difference between group profile and special authorities in an AS/400 server?
0

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • TheRealRaven
    They're different things though both involve authority checking.

    It's not clear what the question is actually asking, though, because in the right circumstances either one might be manipulated to achieve what the other provides. In such cases, it could be assumed that they are effectively equivalent.

    "Special authorities" are 'special'. They short-circuit normal authority checking and grant the holder the ability to perform all actions that fall within that functional area. For example, a user profile may be explicitly excluded from accessing a library by a private *EXCLUDE authority. But if that user has SPCAUT(*ALLOBJ), the private authority is meaningles because the special authority is checked first and the first authority that is found is the one that is effective. You can't restrict a user who has SPCAUT(*ALLOBJ) from accessing any object on the system. Other special authorities have similar consequences in their effective areas.

    Group authority simply gives members of a group the same authorities as the group profile. For example, if a group profile has authority to update a particular file, then all members of the group also have that same authority. A major difference from special authorities, though, is that private authorities are checked before group authorities. If a user is explicitly restricted from a file, group authority won't be checked and access is denied (because checking ends when the first matching authority is found).

    Cross-over between special and group authorities can happen when a group profile is granted a special authority. Trouble can come because group members can all receive that same special authority. Note that this may also be an advantage if handled properly.
    32,480 pointsBadges:
    report
  • sathyaprakash93
    Thank you

    50 pointsBadges:
    report
  • sathyaprakash93
    What is the use of SPCAUT command??

    50 pointsBadges:
    report
  • TheRealRaven
    There is no SPCAUT command. SPCAUT() is an attribute of user profiles and a parameter of the xxxUSRPRF commands.
    32,480 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: