Re: adopting authority

[rob@xxxxxxxxx]

Thanks for the tip.  We added ADOPT to the authorization list and it works 
great!

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





rob@xxxxxxxxx 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
01/21/2004 01:57 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
cc

Fax to

Subject
Re: adopting authority






The *PGM owner's group profiles are NOT used for adopted authority?

That needs some further study.  I thought that's how we were doing it 
here.  I definitely need to look at a program that is working and see how 
it's getting the job done.

Rob Berendt
-- 
Group Dekko Services, LLC
Dept 01.073
PO Box 2000
Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





"Mark S. Waterbury" <mark.s.waterbury@xxxxxxx> 
Sent by: midrange-l-bounces@xxxxxxxxxxxx
01/21/2004 01:23 PM
Please respond to
Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>


To
"Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
cc

Fax to

Subject
Re: adopting authority






Hi, Rob:

Adopted authority is additive.
Adopted authority is checked only if existing authority is inadequate.
The *PGM owner's special authorities (*ALLOBJ, *JOBCTL) are adopted.
The *PGM owner's private authorities are also adopted.
The *PGM owner's group profiles are NOT used for adopted authority.

This has always been an area of confusion with OS/400, but as far as I can
recall, it has always worked this way (that the GRPPRF of the owner does
NOT participate in "adopted authority"), even before they added the 
ability
to have multiple supplemental group profiles.

Hope that helps,

Mark S. Waterbury

----- Original Message -----
From: <rob@xxxxxxxxx>
To: <MIDRANGE-L@xxxxxxxxxxxx>
Sent: Wednesday, January 21, 2004 9:59 AM
Subject: adopting authority


> DSPPGM DGP1
> Owner  . . . . . . . . :   ADOPT
> User profile . . . . . . . . . . . . . . . . . :   *OWNER
> Use adopted authority  . . . . . . . . . . . . :   *YES
>
> Display Object Authority
> Object . . . . . . . :   PPLDIVF
>   Library  . . . . . :     QSYS
> Object type  . . . . :   *LIB
>
> Object secured by authorization list  . . :   SSA33F
>                          Object
> User        Group       Authority
> SSA33                   *ALL
> *PUBLIC                 *EXCLUDE
>
> DSPAUTL SSA33F
>              Object    List
> User        Authority  Mgt
> SSA33       *ALL
> ROB         *ALL        X
> PEGGY       *ALL        X
> *PUBLIC     *EXCLUDE
>
> DSPUSRPRF ADOPT
> Supplemental groups  . .: SSA33
>
> So, given the membership in that supplemental group, why can't a person
> running this program not access files in that library?
>
>
> Rob Berendt
> --
> Group Dekko Services, LLC
> Dept 01.073
> PO Box 2000
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.