Re: Locking users out of an IFS directory

["James H. H. Lampert" <jamesl@xxxxxxxxxxxxxxxxx>]

Scott Klement wrote:
> Sorry, I wasn't intending for you to use DTAAUT(*RX) by itself.  I was 
> intending for you to my previous response and replace DTAAUT(*EXCLUDE) 
> with DTAAUT(*RX).  So you'd have this:
>
> CHGAUT OBJ('/my/dir') USER(my-user) DTAAUT(*RX) OBJAUT(*NONE)
>
> in particular, OBJAUT(*OBJEXIST) would give the user permission over the 
> existence of objects (ability to create/delete).  OBJAUT(*NONE) should 
> remove that ability.

That *was* what I'd initially tried. Option 1 in the list screen of 
WRKAUT (which is what I'd used) *does* default to OBJAUT(*NONE).

At any rate, I've determined that (given that being locked out of 
changing the directory doesn't lock one out of changing existing stream 
files) IFS authorities are the wrong approach to the problem at hand, 
and I've recommended an alternate solution to the powers that be.

--
JHHL
(Off-duty in less than an hour)