Re: Deleting IFS Object - Authorities Question -- MIDRANGE-L

Yes, inherit is better. :)

I just found it odd that IBM commands and Java functions treat the
authorities differently. The owner wasn't the issue, it was the
authorities granted to the file.. with Java they weren't inherited from the
directory. Using IBM commands and even IFS APIs they were.

On Fri, Jul 30, 2021 at 8:56 AM Charles Wilt <charles.wilt@xxxxxxxxx> wrote:

Not sure I understand the question...

Java uses a system API to create objects, off the top of my head I don't
know which one.

I think the word you're looking for is "inherit"

When the directory is created, there's two parms
Create Directory (CRTDIR)

Type choices, press Enter.

Directory . . . . . . . . . . .

Public authority for data . . . *INDIR Name, *INDIR, *RWX, *RW...

Public authority for object . . *INDIR *INDIR, *NONE, *ALL...

But that controls *PUBLIC authority to a new object...

I know of no way to create a new object without the owner having full
authority.

In the WRKAUT screen, what's shown for Type, Pwener, Primary group and
authorization list?
Type . . . . . . . . . . . . . : STMF
Owner . . . . . . . . . . . . : CWILT5
Primary group . . . . . . . . : *NONE
Authorization list . . . . . . : *NONE

Charles

On Fri, Jul 30, 2021 at 7:18 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

So, where does the authority come from when IFS objects are created using
APIs (which appear to be adopted from the directory) vs when Java creates
it (which makes no sense).

On Thu, Jul 29, 2021 at 9:57 PM Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

Neither Java nor IFS objects support adopted authority.

Charles

On Thu, Jul 29, 2021 at 3:36 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Here's another funny thing.. .I can use the user ID that "doesn't

have

authority" to the object to rename it and change the authority to

*RWX

*ALL.

I know this is probably something unique to Java, but I'm curious why

and

what would be the fix so that the Java routine acts the same as far

as

adopted authority as everything else.

On Thu, Jul 29, 2021 at 4:28 PM Brad Stone <bvstone@xxxxxxxxx>

wrote:

HEre's some more info I got testing.

It's a java program creating the file, and here are the authorities

for

the file when created:

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RW X X X X
TEST *RW

Now, the directory has this authority:

Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

So the issue seems to be the java application isn't adopting
authority like other things do (IFS commands, APIs, etc)

On Thu, Jul 29, 2021 at 12:19 PM Brad Stone <bvstone@xxxxxxxxx>

wrote:

Ya, that's what I'm finding. But I am trying to help them figure

out

why... I don't think they were removed, they were just never

granted.

And

the user in question is the one running the application to create

it

in

the

first place.

All my testing has shown the file adopts authorities from the

directory.

Of course, if they run it with a user with *ALLOBJ it works fine

and

the

file is removed.

On Thu, Jul 29, 2021 at 12:14 PM Charles Wilt <

charles.wilt@xxxxxxxxx

wrote:

If by "the user profile appears to not have any object

authorities"

you

mean this

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX

Then it would appear that the owner's authorities have been

removed

and

would explain why they can't delete the file.

Normally the owner (CWILT5) should have
Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX X X X X

Charles

On Thu, Jul 29, 2021 at 11:03 AM Brad Stone <bvstone@xxxxxxxxx>

wrote:

The user profile appears to not have any object authorities.

It

also

doesn't have private authority to the directory.

*PUBLIC has exist, mgt, alter and ref. The user doesn't have

any

of

these.

On Thu, Jul 29, 2021 at 11:33 AM Charles Wilt <

charles.wilt@xxxxxxxxx>

wrote:

Does the user happen to have a private authority to the

directory?

That would take precedence over *PUBLIC.

*RWX applies to the contents...

WHat are the object authorities?
Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

Charles

On Thu, Jul 29, 2021 at 10:20 AM Brad Stone <

bvstone@xxxxxxxxx

wrote:

What authorities to the parent directory and file does a

profile

need

to

have to be able to delete a stream file?

I've run into a case where *PUBLIC has *RWX authority to

the

directory

and

*RW authority to the file.

The User ID that is running the RMVLNK command has *RW

authority

to the

file and is the owner, yet they aren't able to delete the

file.

It was

originally created under that user profile as well.

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365,

Gmail,

or

any

Cloud

Provider!
--
This is the Midrange Systems Technical Discussion

(MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:

https://lists.midrange.com/mailman/listinfo/midrange-l

or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any

subscription

related

questions.

Help support midrange.com by shopping at amazon.com with

our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion

(MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:

https://lists.midrange.com/mailman/listinfo/midrange-l

or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any

subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any

subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com