RE: *SAVRST (was Re: ftp versions of SAVRST... )

John -

Not only *ALLREAD, but *ALLDELETE too .... Someone with *SAVRST authority
can save a file to a *SAVF, "free" its storage and then delete the *SAVF
file... The net results, the file has been removed from the system....

*SAVRST special authority is a very powerful authority that should be handed
out with extreme care.

Kenneth
--
********************************
Kenneth  E.  Graap
IBM Certified Specialist
AS/400 Professional
System Administrator
NW Natural - Information Services
System Services
Phone 503 226 4211 X5537
FAX   603 849 0591
keg@nwnatural.com
********************************


-----Original Message-----
From: John Earl [mailto:johnearl@powertechgroup.com]
Sent: Wednesday, December 12, 2001 12:37 AM
To: midrange-l@midrange.com
Subject: Re: *SAVRST (was Re: ftp versions of SAVRST... )


*SAVRST special authority can also negate *EXCLUDE access to
private objects that you do not want read.  A user with *SAVRST
is not prevented from viewing the contents of an object (sure,
there is a hoop or two to jump through, but it can be done).  It
might be viewed as *ALLREAD special authority.

jte


--
John Earl
johnearl@powertechgroup.com
The Powertech Group          www.powertechgroup.com
Kent, Washington, USA       +1 253-872-7788