Re: Object Authority Needed for DSPJRN, RCVJRNE, RTVJRNE

On Wed, 10 Feb 1999 01:36:15 -0500, "Simon Coulter" <shc@flybynight.com.au>
wrote:

>Hello Gord,
>
>I've been thinking about this one.  Here is my supposition.
>
>To display the journal entries for a specific file you need *USE authority to 
>the journal, journal receiver, 
>and the __file__.  The rationale being that if you do not have rights to view 
>the records in the file then 
>you should not be able to see the contents of the journal.
>
>*OBJEXIST authority is needed to the *JRN object in the following cases:
>       When FILE(*ALLFILE) is specified
>       When the specified file(s) has been deleted from the system
>       When *IGNFILLST is specified for any selected journal codes
>
>Now if the file has been deleted the system cannot check whether you have 
>sufficient authority to the file so 
>it requires you to have a much higher level of authority to the journal than 
>is usually the case.
>
>If *ALLFILE is specified the system can't be bothered checking your authority 
>to each individual file being 
>journalled and requires a higher level of authority to the journal.
>
>If *IGNFILLST is specified you are stating that for certain journal codes you 
>want to see all entries 
>regardless of the file from which they came.  Again the system doesn't want to 
>check the file authority and 
>so requires a higher level of authority to the journal.
>
>Until an IBMer gainsays this I think it is a reasonable supposition.
>
>Regards,
>Simon Coulter.
>

Thanks for your response Simon.  I agree with your suppositions although if
they are accurate, I do not agree with IBM's thinking.  In order to let a
user (who has *USE authority to the journal, the receivers *and* the files)
do one of these commands, I have to give them the authority to delete the
journal?  Because someone thought it would be too much work to check
authorities to each file?  Would there not be a better solution even if one
had to be invented as a special case.  Certainly would be preferable to
allowing someone to delete an object.

Gord

-- 
Gord Hutchinson
TST Overland Express
ghutchinson@tstoverland.com
905-212-6330
fax: 905 602-8895
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---