MIDRANGE dot COM Mailing List Archive



Home » MIDRANGE-L » January 2013

Re: Restrict User



fixed

On 02 Jan 2013 10:50, John Mathew wrote:
If I don't want user id to delete any libraries then?

FWiW, IIRC...
To prevent a user profile named USERNAME [as a *USRPRF without the *ALLOBJ special authority] from deleting any *LIB object in the /QSYS.LIB file system, just issue the following command:
RVKOBJAUT QSYS *LIB USERNAME AUT(*DLT)

On Wed, Jan 2, 2013 at 11:38 AM, John Mathew wrote:
I want to restrict a particular user ID for deleting a libraries.
he should not have access to delete the library.

To prevent a user profile named USERNAME [as a *USRPRF without the *ALLOBJ special authority] from deleting a specific *LIB object named THELIB aka /QSYS.LIB/THELIB.LIB, just issue the following command:
RVKOBJAUT THELIB *LIB USERNAME AUT(*OBJEXIST)


In either case, prevention of the deletion of the library object(s) will be enforced via any interface, except when using adopted authority; e.g. prevented for each of SQL DROP, RMVDIR, DLTLIB, DLTOBJ, ?etc.? The library object(s) can continue to be used in any other way they could be used by that user, prior to the revoke of the specific authority.






Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2014 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact