Re: How to retrieve all user profiles in an IFS object's authority

[Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>]

Dan,

Personally, I would catch the error, and then pop up a message telling 
the user to contact the administrator (or whomever is appropriate) for 
assistance.  Someone familiar with authorities should be able to very 
easily look at the files and fix the authority problems.

If you really need to get a listing of all user authorities (which seems 
like a much more complicated solution) you could do so with the 
Qp0lGetAttr() API.  You could loop through the responses and remove 
those authorities... but, to my mind, this seems like overkill.

And, of course, the user would need sufficient authority to remove the 
other users' authority (remember, adopted authority won't work here) 
which makes this even more complicated.

-SK

On 9/10/2018 1:51 PM, Dan wrote:
> CHGAUT does not allow USER(*ALL), nor is there any RVKAUT command.  What
> are my options for retrieving all of the users in an IFS object's
> authority?
>
> Will an interactive user necessarily have sufficient authority to use
> CHGAUT to change the authority on a given object?