Re: Authority needed on IFS folder to change authority -- MIDRANGE-L

From the manual

http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_71/rzarl/rzarlifscommands.htm?lang=en

Authority needed for object1
Ownership15

15 - If you have *ALLOBJ special authority, you do not need the listed
authority.

Welcome to the world of Unix! ;)

You should probably make sure objects are created with a group profile
owning them.

Charles

On Thu, Sep 11, 2014 at 3:58 PM, Dean Eshleman <Dean.Eshleman@xxxxxxxxxxxx>
wrote:

Hi,

I'm trying to change the authority on an IFS folder via the WRKLNK command
and option 9 to work with authority. The group my user profile is a member
of has *RWX data authority and all object authorities on this directory. I
am not the owner of the folder. The primary group on the folder is *NONE
and no authorization list is specified. When I try to add a new user to
this directory I receive the following error

Message ID . . . . . . : CPFA0B1 Severity . . . . . . . : 40
Message type . . . . . : Diagnostic
Date sent . . . . . . : 09/11/14 Time sent . . . . . . :
15:39:09

Message . . . . : Requested operation not allowed. Access problem.
Cause . . . . . : An operation was requested on an object, but the
operation
is not allowed in the context of the request. Appropriate privileges
may be
required or the file system may not allow an operation to the selected
object.
Recovery . . . : Check the name of the object to make sure it is
correct.
Correct the name and retry the operation. If trying to remove a
directory,
use the RMVDIR command. If trying to link directories, specify *SYMBOLIC
for
the LNKTYPE parameter of the ADDLNK command.

I tried granting authority to a user profile that I don't have authority
to look at. I also tried granting authority to a user profile that I do
have authority to look at. Both failed with the same error. Using the
CHGAUT command also produces the same error. What am I missing? It seems
like we have always had this problem with IFS security. It seems like only
the owner of the folder can change the authority. We are on V7.1.

Dean Eshleman
Software Development Architect

Everence Financial
1110 North Main Street
PO Box 483
Goshen, IN 46527
Phone: (574) 533-9515 x3528
www.everence.com<http://www.everence.com/>

______________________________________________________________________
Confidentiality Notice: This information is intended only for the
individual or entity named. If you are not the intended recipient, do not
use or disclose this information. If you received this e-mail in error,
please delete or otherwise destroy it and contact us at (800) 348-7468 so
we can take steps to avoid such transmission errors in the future. Thank
you.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.