RE: Restore Drops Group's Authority -- MIDRANGE-L

Scott,

Working as designed. When you save File A in Library X, you save the
object itself, but not any private authorities that people (or groups)
may have to File A. The record of Group G's authority to File A is
actually stored in Group G's profile, not in the File A object
descriptor.

When you restore File A to Library Y (instead of X), you are actually
creating a new object that needs its security specifically set.
Otherwise, the File A will accept it's authority from the library value
CRTAUT.

There is one notable exception, if you used an Authorization list to
secure File A, a reference to the Authorization List is stored in the
File A object descriptor, and when you restore File A to Library Y, the
Authorization list will follow and Group G will have all of the
authorities it previously had.

Yet another good reason to use Authorization Lists.

jte

--
John Earl, VP and Chief Technology Officer
PowerTech: 253-872-7788
Direct: 253-479-1408
Mobile: 206-669-3336
John.Earl@xxxxxxxxxxxxx

Email is an excellent way to communicate material that is not time
sensitive. If your communication is of a more urgent nature, please
call.

===========================
This email message and any attachments are intended only for the use of
the intended recipient named above and may contain information that is
privileged and confidential. If you are not the intended recipient, any
dissemination, distribution, or copying is strictly prohibited. If you
received this email message in error, please immediately notify the
sender by replying to this email message or by telephone and delete the
message from your email system. Thank you.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-
bounces@xxxxxxxxxxxx] On Behalf Of Scott Johnson
Sent: Tuesday, September 11, 2007 3:36 PM
To: MIDRANGE-L@xxxxxxxxxxxx
Subject: Restore Drops Group's Authority

Using v5r4 and BRMS. I am not a BRMS nor security expert. Just thrown
into
both.

I have a programmer that does a lot of restores of tables to a

different

library than where they were saved from. In their 'normal' library,

these

tables have a Group authority on them that would allow him to rename

and

copy the table. When the table is restored to a different library via
BRMS, that group profile's authority is not restored with it.

From what I have been able to find via searching this is working as
designed. Is this true or am I missing something somewhere?

If this is working as it should, how are people handling cases like

this?

Over the past year I have been cleaning up some very loose security.

So, I

really don't want to give him too much authority. Just got done taking
away
his All Object authority.

Thanks,
Scott

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.