Re: Adopted authority

On 26-Jul-2016 12:21 -0500, CRPence wrote:

On 26-Jul-2016 11:49 -0500, Tim Bronski wrote:

On 7/26/2016 6:19 PM, CRPence wrote:

I am still not clear; probably a specific example would help
clarify. Regardless, that aforementioned API might be of value.?

I am looking for the agglomerated special authorities that a
program has, not the authority to a specific object. I need to
choose different auditing options depending on the special
authorities that are effective at that time. I don't need to know
which profile the authority came from. I know I can walk the stack
and build my list from there but I'd like to avoid the effort if I
know that there's currently no adopted authority in place.

I seem to recall the UIM has something built-in for testing the
Special Authority (SPCAUT) currently in effect, specifically for that
purpose. Not sure if the feature is exposed as an API.

Exposed in the following API:

Check User Special Authorities (QSYCUSRS) API
[http://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_72/apis/QSYCUSRS.htm]
"… When the API checks for special authorities and the user profile name parameter is *CURRENT or the user who is currently running, the special authorities available to the user include any special authorities the user or the group has, and any program adopted special authorities. If the user profile specified is not the user currently running, then the special authorities available to the user are only the special authorities the user and his group have.
…"