Re: xxxOBJAUT Authorities

Yes, that's the default...

Most commands are *PUBLIC *USE...the ones that aren't are here...
https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_72/rzarl/rzarlcomexc.htm


Makes sense if you think about it...GRTOBJAUT doesn't allow you to grant
authority to just any object.

This command can be used by:
- An object's owner
- A user with object management authority for the specified object. A user
with object management authority can grant to other users any authority
that the user has, except object management authority.
- A user with *ALLOBJ special authority (*ALLOBJ)
- A user authorized to the Database Security Administrator function of IBM
i. The Change Function Usage (CHGFCNUSG) command, with a function ID of
QIBM_DB_SECADM, can be used to change the list of authorized users. Note:
If a user has a usage setting of *DENIED or does not have a usage setting
then the user's object authorities will be used.

Charles


On Thu, May 2, 2019 at 10:48 AM Buzz Fenner <bfenner@xxxxxxxxxxxxxxxx>
wrote:

I was working on giving a specific user profile *USE authority to
GRTOBJAUT; I discovered that *PUBLIC has *USE rights. Same thing with
EDTOBJAUT & RVKOBJAUT.

I'm wondering if this is the default setting from IBM. Not sure if I
should be worried or not but I'd bet that I should.

--
Buzz Fenner, Information Systems Administrator
+1 (870) 930.3374 bfenner@xxxxxxxxxxxxxxxx<mailto:bfenner@xxxxxxxxxxxxxxxx

City Water and Light of Jonesboro
Office: +1 (870) 935.5581 / Fax: +1 (870) 930.3301
Physical: 400 East Monroe Ave., Jonesboro, AR 72401
Mailing: PO Box 1289, Jonesboro, AR 72403-1289

This e-mail message may contain confidential or legally privileged
information and is intended only for the use of the intended recipient(s).
Any unauthorized disclosure, dissemination, distribution, copying or the
taking of any action in reliance on the information herein is prohibited.
E-mails are not secure and cannot be guaranteed to be error free as they
can be intercepted, amended, or contain viruses. Anyone who communicates
with us by e-mail is deemed to have accepted these risks. City Water and
Light of Jonesboro is not responsible for errors or omissions in this
message and denies any responsibility for any damage arising from the use
of e-mail. Any opinion and other statement contained in this message and
any attachment are solely those of the author and do not necessarily
represent those of the company.



________________________________

This electronic mail transmission may contain confidential or privileged
information. If you believe that you have received this message in error,
please notify the sender by reply transmission and delete the message
without copying or disclosing it.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com