John -

Not only *ALLREAD, but *ALLDELETE too .... Someone with *SAVRST authority
can save a file to a *SAVF, "free" its storage and then delete the *SAVF
file... The net results, the file has been removed from the system....

*SAVRST special authority is a very powerful authority that should be handed
out with extreme care.

Kenneth  E.  Graap
IBM Certified Specialist
AS/400 Professional
System Administrator
NW Natural - Information Services
System Services
Phone 503 226 4211 X5537
FAX   603 849 0591

-----Original Message-----
From: John Earl []
Sent: Wednesday, December 12, 2001 12:37 AM
Subject: Re: *SAVRST (was Re: ftp versions of SAVRST... )

*SAVRST special authority can also negate *EXCLUDE access to
private objects that you do not want read.  A user with *SAVRST
is not prevented from viewing the contents of an object (sure,
there is a hoop or two to jump through, but it can be done).  It
might be viewed as *ALLREAD special authority.


John Earl
The Powertech Group
Kent, Washington, USA       +1 253-872-7788

As an Amazon Associate we earn from qualifying purchases.

This thread ...

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2022 by and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.