RE: [WEB400] Re: IFS Authority for a CGI job

[Joel Cochran <jrc@xxxxxxxxxx>]

On Fri, 2004-07-16 at 20:20, Bob Cozzi wrote:
> Interesting. So each folder/directory is treated as a higher-level object
> and needs its own authority? It doesn't propagate down? Or does it and you
> were just starting at the wrong end?
> -Bob

I need to test that... I did start at the file itself, so if the
authority does trickle down, then yes I was starting at the wrong end...

Joel
http://www.rpgnext.com

> 
> -----Original Message-----
> From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
> Behalf Of Joel Cochran
> Sent: Friday, July 16, 2004 4:15 AM
> To: Web Enabling the AS400 / iSeries
> Subject: RE: [WEB400] Re: IFS Authority for a CGI job
> 
> On Fri, 2004-07-16 at 04:27, Bob Cozzi wrote:
> > Joel,
> > I've observed this issue before as well. I think I gave up, so let me know
> > how/if you resolve it.
> > -Bob
> 
> Hey Bob,
> 
> It turned out to be the directory the file was in.  I was so focused on
> the file itself that I didn't pay attention to the directory it was
> in... 
> 
> Strangely enough, using owner adopted secuirty on the program did not
> help, I had to grant *RWX and OBJAUTH(*ALL) authority to both the file
> and the directory to QTMHHTP1.
> 
> Joel
> http://www.rpgnext.com
> 
> > 
> > 
> > -----Original Message-----
> > From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
> > Behalf Of Mel Rothman
> > Sent: Thursday, July 15, 2004 12:20 PM
> > To: web400@xxxxxxxxxxxx
> > Subject: [WEB400] Re: IFS Authority for a CGI job
> > 
> > It's possible there is an authority problem with one or more of the
> > directories 
> > in the path to the file.
> > 
> > Are there any additional clues in the CGI job's joblog?
> > 
> > Mel Rothman
> > Mel Rothman, Inc.
> > 
> > Joel Cochran wrote:
> > 
> > > OK, I added QTMHHTP1 and QTMHHTTP, and I added DTAAUTH(*RWX) and
> > > OBJAUT(*ALL), but still no joy.  I also restarted the webs erver just to
> > > make sure it wasn't somehow required.
> > > 
> > > Joel
> > > http://www.rpgnext.com
> > > 
> > > On Thu, 2004-07-15 at 15:40, Flaker, Jeff wrote:
> > > 
> > >>Try CHGAUT.  Give *RWX to user QTMHHTP1.  
> > >>
> > >>Regards
> > >>
> > >>Jeffrey Flaker
> > >>Senior Programmer/Analyst
> > >>Linens 'N Things
> > >>6 Brighton Rd
> > >>Clifton, NJ  07015
> > >>Phone:   973-249-4384
> > >>Fax:     973-249-4901
> > >>http://www.lnt.com
> > >>
> > >>-----Original Message-----
> > >>From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
> > >>On Behalf Of Joel Cochran
> > >>Sent: Thursday, July 15, 2004 7:32 AM
> > >>To: Web Enabling the AS400 / iSeries
> > >>Subject: RE: [WEB400] IFS Authority for a CGI job
> > >>
> > >>The owner was already me (and yes I have authority), so I changed the
> > >>program to use *OWNER but no change.  USEADPAUT does not show up on the
> > >>compile options, but I issued the CHGPGM command with it as *YES and
> > >>still no change.  I know for QDLS I had to add the QTMHHTTP/HTP1 user
> > >>profiles to the DIRE, could there be something like that?
> > >>
> > >>Joel
> > >>http://www.rpgnext.com
> > >>
> > >>On Thu, 2004-07-15 at 14:17, Flaker, Jeff wrote:
> > >>
> > >>>Joel,
> > >>>The user (QTMHHTP1) usually will not have sufficient authority to do 
> > >>>much.  Use adopted authority for your CGI programs.
> > >>>
> > >>>CHGOBJOWN OBJ(YourProgram) OBJTYPE(*PGM)
> > >>>NEWOWN(SomeProfileWithSufficientAuthority)
> > >>>Make sure that the profile you use will not be deleted in the 
> > >>>future....Create one if you have to.
> > >>>
> > >>>CHGPGM PGM(YourProgram) USRPRF(*OWNER) USEADPAUT(*YES)   
> > >>>
> > >>>Regards
> > >>>
> > >>>Jeffrey Flaker
> > >>>Senior Programmer/Analyst
> > >>>Linens 'N Things
> > >>>6 Brighton Rd
> > >>>Clifton, NJ  07015
> > >>>Phone:   973-249-4384
> > >>>Fax:     973-249-4901
> > >>>http://www.lnt.com
> > >>>
> > >>>-----Original Message-----
> > >>>From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
> > >>>On Behalf Of Joel Cochran
> > >>>Sent: Thursday, July 15, 2004 6:01 AM
> > >>>To: web400@xxxxxxxxxxxx
> > >>>Subject: [WEB400] IFS Authority for a CGI job
> > >>>
> > >>>I'm trying to issue a RMVLNK command from a CGI job, but I keep 
> > >>>getting a "not authorized to object" error to the IFS file.  The file 
> > >>>has *PUBLIC *RWX, but I'm guessing there is something special I need 
> > >>>to do for the HTTP user profiles...
> > >>>
> > >>>Any suggestions out there?
> > >>>
> > >>>Joel
> > >>>http://www.rpgnext.com
> > >>>
> > 
> > 
> > _______________________________________________
> > This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> > To post a message email: WEB400@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/web400
> > or email: WEB400-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/web400.
> > 
> > 
> > 
> > _______________________________________________
> > This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> > To post a message email: WEB400@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/web400
> > or email: WEB400-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/web400.
> 
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
> 
> 
> 
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.