Prevent user from changing authorisation list using edtobjaut and ass. commands

["L. Maartens" <l.maartens@xxxxxxxxx>]

Hello list,

Does anyone have any idea how to prevent a user with *all authority to a
source file to change/remove the authorisation list attached to that file ?

The said *all access to the source file is obtained by the user's name
inserted in the authorisation list with *all capability.

The *all capability is required for adding/changing/deleting members in the
source file.

The user does not have any special authorities.

Setting the limited capabilities provides some protection, but IIRC provides
no protection from API and/or Opsnav capabilities.

Thanks already,

Loek Maartens,
Veracity Software Consultancy BV