Brian, >I'm sorry, I'm still a bit unclear and I'm not near my AS/400 to do tests. > >If I use QUSLOBJ to list *ALL/*ALL *USRPRF, the destination space is >loaded with all user profiles, even user profiles to which I am not >authorized. This sounds like the API is working correctly. Note: By specifying optional parameter group 2 you can indicate the authority the API user must have to an object before detailed information for that object will be included in the list. In a future release the API documentation will be clarified with a statement something like this: The object name and object type information in format OBJL0100 are always returned regardless of the users authority to each object. An information status field is returned in format OBJL0200 and above, which indicates whether or not the user that called the API has authority to the object. A value of 'A' in the information status field indicates that the user is not authorized to the object. If the user is not authorized to the object, no detailed information is returned for the object. To return detailed object information, any authority except *EXCLUDE is needed when optional parameter group 2 is not specified. > I was not able to actually retrieve these user profiles from >the space, however. > >It seems that if I use QUSLOBJ as an unpriviledged user, I am not able to >retrieve from the space *any* objects, even objects to which I am >authorized. Running the program as a user with *ALLOBJ, however, works >fine. Please correct this if it is incorrect. If the API is working correctly, and I still believe it is, then you may have a bug. Please answer these questions. What format name are you passing to the API in parameter 2? What error are you getting when they you attempt to retrieve the information from the user space? When you attempt to look in the user space as an unprivileged user, what authority does that user have to the user space object and its library? Ed Fishel, edfishel@US.IBM.COM +--- | This is the MI Programmers Mailing List! | To submit a new message, send your mail to MI400@midrange.com. | To subscribe to this list send email to MI400-SUB@midrange.com. | To unsubscribe from this list send email to MI400-UNSUB@midrange.com. | Questions should be directed to the list owner/operator: firstname.lastname@example.org +---
As an Amazon Associate we earn from qualifying purchases.
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.