Re: IFS object ownership: possible breakthrough!

["James H. H. Lampert" <jamesl@xxxxxxxxxxxxxxxxx>]

For those with a short memory, the object here is to "give" objects a 
user creates away (i.e., change their owner) to some "unlikely to be 
deleted" user profile, so that if some ignorant administrator deletes 
the user profile with OWNOBJOPT(*DLT), the object doesn't just 
evaporate. (Amazing how, in an OS where it's perfectly safe to use a 
QSECOFR-equivalent account as one's primary account, there would be such 
a glaring gap in the safety nets! Remember, even an administrator can be 
a doofus!)

And the problem is that there are massive OS restrictions on "giving" 
objects away.

I think I found something useful:

A user *can* (at least through the CL CHGOWN command) "give" an object 
to his or her primary group profile, or (apparently) to any user profile 
to which that primary group profile can "give" an object.

And since a group profile can't be deleted if it has members, a user's 
primary group profile certainly qualifies as "unlikely to be deleted."

--
JHHL