Re: IFS Authorities

John, David, & anyone else interested in IFS authorities...

Here is a fairly detailed response thatI received from an
IBM'er who works with IFS.

Apparently IFS authorities differ from native DB2
authorities in that you must have *OBJMGT in order to copy a
file.  The IFS function must be more similar to a CRTDUPOBJ
than it is to a CPYF.

As with my Virtual Device description question, I'm not
crazy about the way that it works, but I am happy to know
the how and why now.

jte



--
John Earl   johnearl@toolnet.com

PowerTech Toolworks  206-575-0711
PowerLock Network Security www.toolnet.com
The 400 School   www.400school.com
--

---

• Subject: Re: Fwd: Re: IFS file system attributes
• From: jjparker@xxxxxxxxxx
• Date: Wed, 14 Apr 1999 12:13:23 -0500
• cc: djohns@xxxxxxxxxx

The reason you can't copy
'/qibm/proddata/Java400/com/ibm/as400/system/Hello.java' when you don't
have any special or private authorities (you are a member of the public),
is because *PUBLIC does not have *OBJMGT authority to the file.  I don't
know why *OBJMGT is missing from this particular file.  Apparently this
file is shipped with the Java400 product and it comes without *OBJMGT for
public.  Try adding *OBJMGT for *PUBLIC using WRKAUT.  The copy should
work.

The reason that *OBJMGT is required for a copy is because the copy function
reads the authorities of the source object and sets them on the target
object.  The act of reading the authorities of an object requires *OBJMGT.

The reason that the message didn't name the object (*N came out instead)
was because the authority failure was detected inside of the file system.
The copy command attempts to determine which object (the source or the
target directory) didn't have sufficient authority.  The method that it
uses to determine this did not detect this particular authority failure, so
it displayed *N.

Jeff Parker, AS/400 Integrated File System
G8P/015-2 D203    507-253-4208    TieLine: 553-4208
Notes email: Jeff Parker/Rochester/IBM,  IBMUSM07(JJPARKER)
VM: RCHVMW2(JEFF)     AFS: jeff@rchland     INTERNET: jjparker@us.ibm.com
--------------------



Karl Hanson
04/13/99 12:34 PM

To:   Jeff Parker/Rochester/IBM@IBMUS
cc:
From: Karl Hanson/Rochester/IBM@IBMUS
Subject:  Fwd: Re: IFS file system attributes


Jeff,  Here is the newsgroup post I mentioned ... if you have any ideas I
can relay them back if you prefer.

Karl Hanson     253-5801   Fax:  253-4728  (area 507, tie 553)
Mail: kchanson@us.ibm.com
DRDA Development    Dept HVR    015-3-D206    IBM Rochester

      Subject: Re: IFS file system attributes
         Date: Sun, 11 Apr 1999 14:23:43 -0700
         From: John Earl <johnearl@toolnet.com>
 Organization: PowerTech Toolworks & The 400 School
           To: Darryl Johns <djohns@us.ibm.com>
   Newsgroups: comp.sys.ibm.as400.misc
   References: 1 , 2


Darryl (or any other IFS genius),

I'm having a little trouble with IFS authorities, and can't quite find the
source of the problem.  Any help would be greatly appreciated.

I'm looking at providing a programmer profile (*JOBCTL only) with
individual
authority to copy something out of an IFS directory and I'm having a devil
of
a time with (I think) the target authority.

The specifics:  User profile JOHN is trying to copy a "Hello.java" from
"/QIBM/ProdData/Java400/com/ibm/as400/system" into directory "/john".  User
profile JOHN created and has ownership
authority to directory "/john".

Message CPFA09C is issued saying ' Authority is not sufficient to access
object *N.'   Any idea's on how I find out what *N is?

I'm guessing that there must be a rule about authority needed to the parent
directory structure, I just can't put
my finger on it.

Any help?


jte

--
John Earl   johnearl@toolnet.com

PowerTech Toolworks  206-575-0711
PowerLock Network Security www.toolnet.com
The 400 School   www.400school.com
--

---