Re: IFS security documentation?

[thomas@xxxxxxxxxxx]

Patrick:

On Wed, 21 November 2001, "Patrick Townsend" wrote:

> I am struggling to understand IFS file security. I've been using the CHGAUT
> command to add and change user authorities. But it is not working quite like
> I would think. For example, if a program is owned by QSECOFR and adopts user
> authority, it may not have the authority needed to add or change an
> authority on an IFS file. Weird. Does anyone know a good publication that
> describes IFS file security? I understand *RWX UNIX authority concepts, just
> need help with how to manage this stuff from an AS/400 application
> perspective. Any thoughts would be appreciated.

The following quote from "OS/400 Integrated File System Introduction" should 
get you started:

==Be aware, however, that adopting authorities is not supported. An integrated 
file system API uses the authority of the user profile under which the job is 
running.==

As I see it, in effect, IFS API calls are calls to programs that are set to 
USEADPAUT(*NO).

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/