Re: CHGAUT not authorized -- MIDRANGE-L

For the 1st part - QSECOFR, any profile with *ALLOBJ special authority, or any 
user profile with *OBJMGT authority to an object can grant and revoke 
aouthority to other users for that object using one of the following commands
GRTOBJAUT
RVKOBJAUT
EDTOBJAUT
CHGAUT
DSPAUT
WRKAUT
For the 2nd part - cannot help you, sorry

>>> "Peter Dow" <maillist@dowsoftware.com> 05/23/02 12:18PM >>>
Hi Everyone,

I have two questions about the CHGAUT command that I haven't been able to
find answers to, other than empirically:

1. Is it true that the only person authorized to do CHGAUT is the owner of
the object whose authority is being changed?

2. What happens if the object is in a QNTC directory, i.e. actually on an NT
server?

For question 1, here's some supporting info:

When I change the authority for the following object, no problem.
----------------------------------------------------------------------------
----------
Object . . . . . . . . . . . . :   /smart/CMC/SMART.txt
Owner  . . . . . . . . . . . . :   CC_PGMPCD
Primary group  . . . . . . . . :   *NONE
Authorization list . . . . . . :   *NONE


Type options, press Enter.
  1=Add user   2=Change user authority   4=Remove user

                   Data     --Object Authorities--
Opt  User        Authority  Exist  Mgt  Alter  Ref

     *PUBLIC     *RWX         X     X     X     X
     CC_PGMPCD   *RWX         X     X     X     X


When another user runs a program that replaces the object's data, then tries
to change the authority, this is what happens, in spite of the fact that
*PUBLIC has all object and data authorities that it's possible to give:
----------------------------------------------------------------------------
----------

*NONE      Command                       05/22/02   15:15:17   QCADRV
QSYS        0387     SMARTC       HS#LIBR      00C7
                                     Message . . . . :     9100 - CPYTOSTMF

FROMMBR('/QSYS.LIB/QTEMP.LIB/SMARTF.FILE/SMARTF.MBR')

                                       TOSTMF('/Smart/CMC/SMART.txt')
STMFOPT(*REPLACE) STMFCODPAG(*PCASCII)
CPCA082    Completion              00    05/22/02   15:15:17   QP0LCDTS
QSYS        *STMT    SMARTC       HS#LIBR      00C7
                                     From module . . . . . . . . :
QP0LCDTS
                                     From procedure  . . . . . . :   main
                                     Statement . . . . . . . . . :   984
                                     Message . . . . :   Object copied.
<snipped 2nd level text>
*NONE      Command                       05/22/02   15:15:17   QCADRV
QSYS        0387     SMARTC       HS#LIBR      00CF
                                     Message . . . . :     9600 - CHGAUT
OBJ('/Smart/CMC/SMART.txt') USER(*PUBLIC)
                                       DTAAUT(*RWX) OBJAUT(*ALL)
CPFA0B1    Escape                  40    05/22/02   15:15:17   QSYGENCM
QSYS        *STMT    SMARTC       HS#LIBR      00CF
                                     From module . . . . . . . . :
QSYGENCM
                                     From procedure  . . . . . . :
qsy_send_msg__FPcT1iT1T3T1
                                     Statement . . . . . . . . . :   180
                                     Message . . . . :   Requested operation
not allowed.  Access problem.
                                     Cause . . . . . :   An operation was
requested on an object, but the operation
                                       is not allowed in the context of the
request.  Appropriate privileges may be
                                       required or the file system may not
allow an operation to the selected
                                       object. Recovery  . . . :   Check the
name of the object to make sure it is
                                       correct.  Correct the name and retry
the operation.  If trying to remove a
                                       directory, use the RMVDIR command. If
trying to link directories, specify
                                       *SYMBOLIC for the LNKTYPE parameter
of the ADDLNK command.
----------------------------------------------------------------------------
----------


tia,
Peter Dow
Dow Software Services, Inc.
909 425-0194 voice
909 425-0196 fax


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.