Re: MCH1001 in CGI-Program

Hello Chuck

Your assumption about the authority of the user qtmhhtp1 to its own user profile was correct. I added the authority *all for qtmhhtp1 to its user profile and this did the trick. I think less would have done it too, but I haven't checked this.

Thank you and others who responded very much.

Best regards

Jan


Am 28.07.2016 um 17:19 schrieb CRPence:

On 28-Jul-2016 09:04 -0500, Jan Grove Vejlstrup wrote:

I'm trying to copy a physical file from a library in the library-list
to qtemp in a cgi-job running under the user profile qtmhhtp1. The
command is:

crtdupobj obj(myFile) fromlib(*libl) objtype(*file) tolib(qtemp)

The file myFile has Authority *public *all. I receive the message
MCH1001 (attempt to use permanent system object qtmhhtp1 without
authority). The file doesn't get copied.

What am I doing wrong?

Nothing wrong with the request [after correcting FROM( to FROMLIB(]; perhaps a bit safer, to have coded the other parameter specifications to avoid being impacted by any changed defaults.

What is wrong with what was offered however, is a lack of the spooled joblog and the server OS VRM level, and the T-AF audit log entry details; for the latter, I can probably safely infer the system-object QTMHHTP1 is the *USRPRF object by that name. A WRKJOB OPTION(*ALL) OUTPUT(*PRINT) taken at the time of the x0A01 exception [msg MCH1001] would be of value as well; if not taken then, then performed in a request immediately before the failing CRTDUPOBJ.

Does the following request [with appropriate SYSLIBL, CURLIB, and INLLIBL to match the failing scenario] as submitted by a user with *ALLOBJ authority, exhibit the same failure, per review of the joblog?:

sbmjob cmd(crtdupobj myFile *libl objtype(*file) tolib(qtemp)
) user(qtmhhtp1) job(tmAutTst)
logoutput(*jobend) log(4 0 *seclvl) splfacn(*keep)

Thank you very much in advance.

Note: The Create Duplicate Object (CRTDUPOBJ) tries to set all of the private authorities in the from-object into the to-object. Specific attributes of the user profile and the process making the request sometimes can make completing that work somewhat problematic.

The error suggests that perhaps the user profile QTMHHTP1 may be missing authority to itself. As obtained by a user with *ALLOBJ special authority, output from the requests DSPUSRPRF QTMHHTP1 OUTPUT(*PRINT) and DSPOBJAUT QTMHHTP1 *USRPRF may be helpful. If the failure only occurs when the job is switched to another user [i.e. the above SBMJOB does not fail], then the same two requests against the user profile under which the failing job runs, might also be of value to review.