Help with IFS security

[mcrump@xxxxxxxxxxxxxx]

I think I know the answer to this but thought I'd see what experiences the
great people of the Midrange-L are with IFS security (I know the term is
not necessarily proper).

Let me preface this question that what I am facing isn't tough it's just
that I have a hard time adjusting to directory structures from libraries
;-)

What we want to do is have a use the AS/400 for PC file storage for a
department.  In changing my paradigm I do not want to use DLS.  This
department will have an area that only they can access (one directory) and
then have sub-directories for each plant location (additional directories).
My thought process was to have a main directory for the department and
sub-directories for the plants.  However, the plants should only be able to
navigate through the department directory and not have any access to files
within that directory.  That does not seem to work and I'm not sure if it
will.  The IFS and security manual seem to be a little fuzzy on directory
security.  The scenario would look like this:

                Department
     |---------------|--------------|
     |                                        |
Plant 1                           Plant 2

Department people would have all access to the Department directory and to
Plant 1 and Plant 2.  Plant 1 personnel would have all access to only the
Plant 1 directory.  Plant 2 personnel would have all access to only the
Plant 2 directory.  The problem with this is in order to allow Plant 1 and
Plant 2 personnel to navigate (ie: CD, etc) through the higher level
Department directory it seems that I have to give them excessive authority
to that Directory.  Can this approach work and maintaing the security we
desire or should I change my directory structure?



+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
uucp
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---