Re: Read-only dir & files within?

[VERNON HAMBERG Owner <vhamberg@xxxxxxxxxxxxxxx>]

Hi Justin and all


I wondered about the *ALLOBJ bit here, so am watching Margaret Fenlon's COMMON presentation on IFS security. She says that the *READONLY attribute prevents writing or deleting the object, and *ALLOBJ cannot override this attribute. She underlined "or deleting".

Anyone who is a COMMON member can view the presentations in the IFS Bootcamp - of course, Mark, your good counsel to limit number of users with *ALLOBJ is absolutely valid.


On Wed, 3 Apr, 2024 at 4:07 PM, Mark Waterbury <mark.s.waterbury@xxxxxxxxxxxxx> wrote:
 

To: midrange systems technical discussion

Justin,
Any user with *ALLOBJ can always delete your precious directory, no matter what you do.   
"*ALLOBJ" means "all objects" -- including IFS (*STMFs and directories).
This is why it is important to limit the number of user profiles with *ALLOBJ.
Just saying.
Mark S. Waterbury

   On Wednesday, April 3, 2024 at 02:35:21 PM EDT, Justin Taylor <jtaylor.0ab@xxxxxxxxx<mailto:jtaylor.0ab@xxxxxxxxx>> wrote:  

My goal is to make a directory that can't be deleted.  *READONLY works OK
when I tested it, but I just wanted a sanity check.

Thanks


date: Tue, 2 Apr 2024 13:56:24 -0400
> from: Rob Berendt <robertowenberendt@xxxxxxxxx<mailto:robertowenberendt@xxxxxxxxx>>
> subject: Re: Read-only dir & files within?
>
> I do not find any documentation on this.  However this testing may answer
> that:
> > MD DIR('/home/ROB/JT')
>  Directory created.
> > CHGATR OBJ('/home/ROB/JT') ATR(*READONLY) VALUE(*YES)
>  Attributes changed for 1 objects.  0 objects not changed.
> > EDTF STMF('/home/ROB/JT/test.txt')
> The EDTF did create the file
> > DSPF STMF('/home/ROB/JT/test.txt')
> The DSPF showed the changes.
>
> There is an attribute called *RSTDRNMUNL you might want to read up on.