Re: Create Table Security

[Mark Adkins <adkinsm@xxxxxxxxxx>]

Here is a better presentation of the issue.  I've changed the authorities 
to something more typical and am using a new library.  I am using *none 
commitment control and *sql naming.  No matter how I change things, except 
for *allobj authority, no one except user "mark" can run this statement.

I am trying to run this statement from user ADKINSM.

CREATE TABLE MARK.CHAIN( 
    CHAINID      SMALLINT GENERATED BY DEFAULT AS 
      IDENTITY (START WITH 1, INCREMENT BY 1, NO CACHE), 
    CHAINNUM     DECIMAL(2, 0) NOT NULL WITH DEFAULT 0,
    SHORTDESC    VARCHAR(20) NOT NULL WITH DEFAULT '', 
    LONGDESC     VARCHAR(40) NOT NULL WITH DEFAULT '', 
    CONSTRAINT MARK.CHAINPK PRIMARY KEY (CHAINID) 
) 

Here is the errortext.

CPC2206 Ownership of object CHAIN in MARK type *FILE changed. 
CPF3224 Not authorized to perform operation on file CHAIN. 
CPF22BE Function not done for user profile AMPGMR. 
CPF2227 One or more errors occurred during processing of command.
CPI32B1 Constraint was removed. 
CPC32B1 1 constraint(s) removed from file CHAIN. 
SQL0551 Not authorized to object MARK in *N type *USRPRF. 

Here is the profile information:

User profile . . . . . . . . . . . . . . . :   MARK 
 
User class . . . . . . . . . . . . . . . . :   *USER 
Special authority  . . . . . . . . . . . . :   *NONE 
Group profile  . . . . . . . . . . . . . . :   AMPGMR 
Owner  . . . . . . . . . . . . . . . . . . :   *USRPRF 
Group authority  . . . . . . . . . . . . . :   *ALL 
Group authority type . . . . . . . . . . . :   *PGP 
Supplemental groups  . . . . . . . . . . . :   PGMRAPP 


User profile . . . . . . . . . . . . . . . :   ADKINSM 

User class . . . . . . . . . . . . . . . . :   *PGMR 
Special authority  . . . . . . . . . . . . :   *JOBCTL 
                                               *SPLCTL 
Group profile  . . . . . . . . . . . . . . :   AMPGMR 
Owner  . . . . . . . . . . . . . . . . . . :   *USRPRF 
Group authority  . . . . . . . . . . . . . :   *ALL 
Group authority type . . . . . . . . . . . :   *PGP 
Supplemental groups  . . . . . . . . . . . :   PGMRAPP

Here are the objects information:

Object . . . . . . . :   MARK            Owner  . . . . . . . :   AMPGMR 
  Library  . . . . . :     QSYS          Primary group  . . . :   *NONE 
Object type  . . . . :   *LIB            ASP device . . . . . :   *SYSBAS
 
Object secured by authorization list  . . . . . . . . . . . . :   *NONE 

                         Object 
User        Group       Authority 
*PUBLIC                 *ALL 
*GROUP      AMPGMR      *ALL 


Object . . . . . . . :   MARK            Owner  . . . . . . . :   MARK 
  Library  . . . . . :     QSYS          Primary group  . . . :   *NONE 
Object type  . . . . :   *USRPRF         ASP device . . . . . :   *SYSBAS

                         Object 
User        Group       Authority 
*PUBLIC                 *EXCLUDE 
MARK                    *ALL 
*GROUP      AMPGMR      *ALL