Re: Object Authority

Welcome to the wonderful world of AS/400.
I strongly recommend that PUBLIC is set to *EXCLUDE, and the different user 
profiles are placed into user groups. Create authorization lists giving these 
different groups *USE, *CHANGE, etc depending on what their job 
responsibilities are. Apply the authorization list(s) to 
1/. the library itself, giving access (or denying) access to the library
2/. the objects within the library 
When I was first itroduced to the AS/400, I was in the same boat. I did not 
know a thing about security, until we were audited by the Office of Thrift 
Supervision. Our final score was --- we were given a m,onth to rectify the 
security, otherwise we would need to remove the system - period.
The book "Implementing AS/400 Security" by Wayne Madden was a tremendous help.
As for working on the AS/400, I've worked on numerous platforms, too many to 
mention here, but the AS/400 has them ALL beat, by far.
Good luck 


>>> <keith.nolan@dubport.ccs.ie> 06/14 6:32 AM >>>
Hi all,

We have just migrated this weekend from a system/36 to an AS/400 and we are 
currently having some problems with object authority on our data-files.  All 
our current applications still run in 36 environment so all our data files are 
in 1 library at the moment..  When a user creates a file, that user gets *all 
authority to it but *public only gets change Authority.  How do I stop this and 
allow *public have *all authority automatically.  I know that this probably 
sounds like a really stupid question and is easy to fix but I am still getting 
used to this system and am lost with some issues.  I would be grateful if 
someone could put me out of my misery and solve this one for me.

TIA

Keith.
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com 
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---