RE: GRTOBJAUT...does anyone know

You can Grant and Revoke Authority even on locked Objects.

From a presentation by Scott Forstie

Grant and Revoke without a lock

Challenge: Seemingly impossible to make DDL changes in production
Response: ALLOW_DDL_CHANGES_WHILE_OPEN - QAQQINI control
Benefit: Ability to deploy security changes without quiescing user activity
Enhanced: GRANT and REVOKE (SQL) Grant Object Authority (GRTOBJAUT), and
Revoke Object Authority (RVKOBJAUT) CL command

From the following document.

www.semiug.org/2019/docs/IBM%20i%207.4%20and%20TR%20Announcements%20-%20Octo
ber%202019.pdf

Rob W.


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Michael Quigley
Sent: Tuesday, May 12, 2026 12:25 PM
To: midrange-l@xxxxxxxxxxxxxxxxxx
Subject: RE: GRTOBJAUT...does anyone know

I would use the SQL solution also. If you run into any object locks, etc.,
you're going to have a real chocolate mess trying to get through everything.
If you have a dedicated system, it might not be so bad. But the other
advantage would be a chance to get familiar with using the SQL
services--that alone could pay dividends.

Thanks,
Michael Quigley
Computer Services
www.TheWay.org

-----Original Message-----
message: 1
date: Mon, 11 May 2026 16:44:05 -0500
from: Vern Hamberg via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>
subject: Re: GRTOBJAUT...does anyone know

The SQL solution Rob and I suggested will take 2, maybe 3 minutes -
OK, maybe 5!

*Regards*

*Vern Hamberg*

IBM Champion 2025 <cid:part1.WHYoliq8.HOoxyXO4@centurylink.net> CAAC
(COMMON Americas Advisory Council) IBM Influencer 2023


On 5/11/2026 4:36 PM, Don Brown via MIDRANGE-L wrote:

For 8000 objects I would just run the grtobjaut command on all

objects.

Unless there is a requirement to know which objects need to be

updated.

This will take a minute whereas writing a program will take much

longer

relatively speaking.

My 2 cents

Cheers
Don

?

Don Brown

Senior Consultant
?
[1]OneTeam IT Pty Ltd
P: 1300 088 400

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

.