Re: Create Table Security

Mark - please show the second-level text for all those messages, as well. I 
don't have time to chase down the message IDs. Besides, the substitution values 
are specific to your system.

Thanks
Vern

-------------- Original message -------------- 
From: Mark Adkins <adkinsm@xxxxxxxxxx> 

Here is a better presentation of the issue. I've changed the authorities 
to something more typical and am using a new library. I am using *none 
commitment control and *sql naming. No matter how I change things, except 
for *allobj authority, no one except user "mark" can run this statement. 

I am trying to run this statement from user ADKINSM. 

CREATE TABLE MARK.CHAIN( 
CHAINID SMALLINT GENERATED BY DEFAULT AS 
IDENTITY (START WITH 1, INCREMENT BY 1, NO CACHE), 
CHAINNUM DECIMAL(2, 0) NOT NULL WITH DEFAULT 0, 
SHORTDESC VARCHAR(20) NOT NULL WITH DEFAULT '', 
LONGDESC VARCHAR(40) NOT NULL WITH DEFAULT '', 
CONSTRAINT MARK.CHAINPK PRIMARY KEY (CHAINID) 
) 

Here is the errortext. 

CPC2206 Ownership of object CHAIN in MARK type *FILE changed. 
CPF3224 Not authorized to perform operation on file CHAIN. 
CPF22BE Function not done for user profile AMPGMR. 
CPF2227 One or more errors occurred during processing of command. 
CPI32B1 Constraint was removed. 
CPC32B1 1 constraint(s) removed from file CHAIN. 
SQL0551 Not authorized to object MARK in *N type *USRPRF. 

Here is the profile information: 

User profile . . . . . . . . . . . . . . . : MARK 

User class . . . . . . . . . . . . . . . . : *USER 
Special authority . . . . . . . . . . . . : *NONE 
Group profile . . . . . . . . . . . . . . : AMPGMR 
Owner . . . . . . . . . . . . . . . . . . : *USRPRF 
Group authority . . . . . . . . . . . . . : *ALL 
Group authority type . . . . . . . . . . . : *PGP 
Supplemental groups . . . . . . . . . . . : PGMRAPP 


User profile . . . . . . . . . . . . . . . : ADKINSM 

User class . . . . . . . . . . . . . . . . : *PGMR 
Special authority . . . . . . . . . . . . : *JOBCTL 
*SPLCTL 
Group profile . . . . . . . . . . . . . . : AMPGMR 
Owner . . . . . . . . . . . . . . . . . . : *USRPRF 
Group authority . . . . . . . . . . . . . : *ALL 
Group authority type . . . . . . . . . . . : *PGP 
Supplemental groups . . . . . . . . . . . : PGMRAPP 

Here are the objects information: 

Object . . . . . . . : MARK Owner . . . . . . . : AMPGMR 
Library . . . . . : QSYS Primary group . . . : *NONE 
Object type . . . . : *LIB ASP device . . . . . : *SYSBAS 

Object secured by authorization list . . . . . . . . . . . . : *NONE 

Object 
User Group Authority 
*PUBLIC *ALL 
*GROUP AMPGMR *ALL 


Object . . . . . . . : MARK Owner . . . . . . . : MARK 
Library . . . . . : QSYS Primary group . . . : *NONE 
Object type . . . . : *USRPRF ASP device . . . . . : *SYSBAS 

Object 
User Group Authority 
*PUBLIC *EXCLUDE 
MARK *ALL 
*GROUP AMPGMR *ALL 
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list 
To post a message email: MIDRANGE-L@xxxxxxxxxxxx 
To subscribe, unsubscribe, or change list options, 
visit: http://lists.midrange.com/mailman/listinfo/midrange-l 
or email: MIDRANGE-L-request@xxxxxxxxxxxx 
Before posting, please take a moment to review the archives 
at http://archive.midrange.com/midrange-l.