RE: removing *PUBLIC authority from tables

I know that IFS doesn't support inherited permissions. I never thought about it, but CPYTOSTMF command uses IFS naming for systems objects.

It sounds like you're caught in a catch-22.



-----Original Message-----
From: Gerald Magnuson [mailto:gmagqcy.midrange@xxxxxxxxx]
Sent: Tuesday, May 19, 2020 1:27 PM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: removing *PUBLIC authority from tables

Does the owner of the program have the necessary authorities?

YES QPGMR owns the program, owns the table, has *ALL authority on
table

so...
the places I do this:
CPYTOSTMF FROMMBR('/qsys.lib/XXXXXX.lib/CXXXCPTX.file/CXXXCPTX.mbr')

TOSTMF('/mmail/temp/TPS115.TXT') STMFOPT(*REPLACE) STMFCODPAG(*PCASCII)

I need those tables to allow for the PROFILE RUNNING THE JOB to have authority?
because of the FROMMBR is using the IFS structure and authority?



the error was:
CPFA09C - Message . . . . : Not authorized to object. Object is

/qsys.lib/XXXXXXX.lib/CXXXCPTX.file/CXXXPTX.mbr.

Cause . . . . . : You do not have the correct authority for object

/qsys.lib/XXXXXXX.lib/CXXXCPTX.file/CXXXCPTX.mbr or for one of the

directories in the object path. Recovery . . . : Contact your security

officer, the object owner, or other authorized person to obtain the correct
authority to use object /qsys.lib/XXXXXXX.lib/CXXXCPTX.file/CXXXCPTX.mbr
or
the directories in the object path, and try your request again. If the

object name is *N, it could not be determined which of the objects authority
was not sufficient. The Security Reference, SC41-5302, contains authority

information for the operation.


On Tue, May 19, 2020 at 1:12 PM James H. H. Lampert < jamesl@xxxxxxxxxxxxxxxxx> wrote:

On 5/19/20 11:04 AM, Gerald Magnuson wrote:

we have all programs compiled with ADOPT *OWNER.
I am removing *PUBLIC authority (saying *PUBLIC *EXCLUDE)
but, when I get to programs that have a CPYTOSTMF, I get a "not
authorized".
what is the secret to this?

Does the owner of the program have the necessary authorities?

And what compiler uses "ADOPT" as a parameter to determine whose
authority the program runs under? RPGLE and CL use "USRPRF" as that
parameter.

--
JHHL

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com