Re: Object authority

Le 09/06/2022 à 20:42, smith5646midrange@xxxxxxxxx a écrit :

Is there a level of security that I am overlooking that will allow us to
lock down a library to prevent the creation of new objects and the renaming
of existing objects yet still allow the ADDPFM/ADDLFM and RMVM commands?

ADDxFM and RMVM require *EXECUTE and *ADD authority on the library (https://www.ibm.com/docs/en/i/7.5?topic=commands-file).
CRTxxx require *READ and *ADD authority on the library (https://www.ibm.com/docs/en/i/7.5?topic=commands-general-rules-object-authorities)
RNMOBJ require *EXECUTE and *UPDATE authority on the library (https://www.ibm.com/docs/en/i/7.5?topic=commands-common-most-objects)


So, *EXECUTE and *ADD might fit your requirement, but it might reduce access for other tasks.

You have also the possibility to use a program which adopts owner authority and set library authority to *EXCLUDE. Here also, other tasks might no longer work.