Re: Adopted authority

Actually it is your circus.

Why re-invent the wheel when you don't have to? Why not have the program adopt the authority it needs to perform its function? The authority given in the adoption process will not go back up the call stack.

If you reall want to control the authority used by the program/api look into the profile swap apis.


-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tim Bronski
Sent: Tuesday, July 26, 2016 10:13 AM
To: Midrange Systems Technical Discussion
Subject: Re: Adopted authority


On 7/26/2016 7:01 PM, Monnier, Gary wrote:

It sounds like you need to architect security into your development process so you know precisely what authorities are in play at any given point in the stack.

We get called as apis by customer processes so it's not my circus.

Just out of curiosity, why are you concerned about agglomerated special authorities?

I want to know if a user has authority to an action because they've been granted authority specifically or whether they have it because they've somehow got *ALLOBJ.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Tim Bronski
Sent: Tuesday, July 26, 2016 9:50 AM
To: Midrange Systems Technical Discussion
Subject: Re: Adopted authority

I am looking for the agglomerated special authorities that a program has, not the authority to a specific object. I need to choose different auditing options depending on the special authorities that are effective at that time. I don't need to know which profile the authority came from. I know I can walk the stack and build my list from there but I'd like to avoid the effort if I know that there's currently no adopted authority in place.


On 7/26/2016 6:19 PM, CRPence wrote:

I am still not clear; probably a specific example would help clarify.
Regardless, that aforementioned API might be of value.?

--
Need sFTP or PGP? Download your native sFTP or OpenPGP solutions here:
www.arpeggiosoftware.com
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.