Re: LIBRARY/file security QUESTION

["Simon Coulter" <shc@xxxxxxxxxxxxxxxxx>]

Hello Vanya,

Thanks for the compliments.  The "wrrr..." was just a joke.  I did find 
verification in the manuals which is 
why I said I should have checked first.  For anyone else listening the 
information is:

The Database Programming manual has a section on logical file authorities in 
1.4.1.6.5 but it's not very 
clear.

The Security Reference manual has a section in 7.5.1 which is clear -- 
"Providing access to the information 
defined by a logical file requires data authority to both the logical file and 
the associated physical files."

Regards,
Simon Coulter.

«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
«» FlyByNight Software         AS/400 Technical Specialists       «»
«» Eclipse the competition - run your business on an IBM AS/400.  «»
«»                                                                «»
«» Phone: +61 3 9419 0175      Mobile: +61 0411 091 400           «»
«» Fax:   +61 3 9419 0175      mailto: shc@flybynight.com.au      «»
«»                                                                «»
«» Windoze should not be open at Warp speed.                      «»
«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»«»
//--- forwarded letter -------------------------------------------------------
> MIME-Version: 1.0
> Date: Sun, 14 Feb 99 21:26:15 -0700
> From: "Vanya Jovic" <jovic@calcna.ab.ca>
> To: MIDRANGE-L@midrange.com
> Reply-To: MIDRANGE-L@midrange.com
> Subject: Re: LIBRARY/file security QUESTION

> 
> 
> Hi Simon,
> you are great guy; no need to play "right-wrong" game. It's important for
> us to come out with some kind of solution, it's less important who hit
> the nail this time. 
> 
> BTW, manuals weren't enought this time, I had to play a little.
> 
> Vanja Jovic
> 
> On Sun, 14 Feb 1999, Simon Coulter wrote:
> 
> > 
> > Mello Vanya,
> > 
> > I should have checked the manual before answering.  You are correct.  Data 
>rights need to be assigned to 
both 
> > the LF and the PF although object rights are not required to the PF (i.e., 
>the PF can still be secured 
from 
> > direct access by removing *OBJOPR).
> > 
> > I guess that means I was wrr... Hmm, let's try again.  I was wrrrrr... Hmm, 
>you were right.   :)
> > 
> > Regards,
> > Simon Coulter.
> > 
> > ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ
> > ½ƒ FlyByNight Software         AS/400 Technical Specialists       ½ƒ
> > ½ƒ Eclipse the competition - run your business on an IBM AS/400.  ½ƒ
> > ½ƒ                                                                ½ƒ
> > ½ƒ Phone: +61 3 9419 0175      Mobile: +61 0411 091 400           ½ƒ
> > ½ƒ Fax:   +61 3 9419 0175      mailto: shc@flybynight.com.au      ½ƒ
> > ½ƒ                                                                ½ƒ
> > ½ƒ Windoze should not be open at Warp speed.                      ½ƒ
> > ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ½ƒ
> > //--- forwarded letter 
>-------------------------------------------------------
> > > MIME-Version: 1.0
> > > Date: Fri, 12 Feb 99 22:08:58 -0700
> > > From: "Vanya Jovic" <jovic@calcna.ab.ca>
> > > To: MIDRANGE-L@midrange.com
> > > Reply-To: MIDRANGE-L@midrange.com
> > > Subject: Re: LIBRARY/file security QUESTION
> > 
> > > 
> > > 
> > > 
> > > NO WAY. 
> > > 
> > > Your user profile would be able to "see" object description or member
> > > description of logical, but it won't be able to retrieve data from library
> > > in which physical file resides unles it has at least EXECUTE rights to
> > > that library. It also has to have "READ" right to physical file.
> > > 
> > > Vanja Jovic.
> > 
> > +---
> > | This is the Midrange System Mailing List!
> > | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> > | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> > | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator: 
>david@midrange.com
> > +---
> > 
H 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---
> 

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---