Re: Special Authorities

On 14-Jan-2015 10:50 -0600, Ty Miller wrote:

1) If an user has *SECADM special authority, then do they
automatically have the *AUDIT special authority?

2) If an user has *SECADM special authority do they automatically
have any other special authorities?

3) Are there any special authorities that automatically grant or
include any other special authorities?

4) Aren't all special authorities separate?

The Special Authority (SPCAUT) values are separate\granular, each with its own special-value. However by request of the User Class (USRCLS) attribute\parameter, multiple Special Authorities being granted at once, can be the effect.

One potential source of confusion, is that the Special-Value "*SECADM" is supported both as a single-value on the USRCLS() parameter and as one of the available Special Authority special-values. The default for the SPCAUT() parameter on the Create User Profile (CRTUSRPRF) command is the special-value "*USRCLS". That implies the request should assign the Special Authorities according to what is appropriate for the specified User Class; e.g. the following two parameter specifications made on either the CRTUSRPRF or the Change User Profile (CHGUSRPRF) commands, asks that the set of special authorities [as documented for the user class of Security Administrator] should be granted to the named User Profile (USRPRF):
USRCLS(*SECADM) SPCAUT(*USRCLS)