RE: Authority to libraries

["John Earl" <john.earl@xxxxxxxxxxxxxxxxxx>]

> I exclude a user from a library.  I then create a program that needs to
> execute a program in that library.  I wanted the user to have access only
> through programs.   I tried to do this by compiling the program with
> *owner authority (the owner has *all authority to the library and objects
> in the library).  When I try to run the program using the excluded user I
> get an error saying the user is not authorized to the library.  What am I
> doing wrong?

Your message is not completely clear. is the program that adopts authority
in the restricted library?  If so, then everything is working as designed.
In order for a user to get access to an object, they must have *OPR + *READ
rights to the library.  Even though your program adopts the appropriate
authority, your user never gets a chance to adopt that authority because
they are locked out at the library level before they are ever able to
execute the program.

If the program that adopts the authority is not inside the restricted
library, and the user is still getting an authority error, then I have to
suspect a configuration problem.  Either the user *OWNER does not have *ALL
authority to the library and it's objects, or you've got a library list
problem and you're not calling the version of the program that you think you
are, or you've selected the USEADPAUT(*NO) parameter on the program which
prevents you from passing the adopted authority down the program stack.

HTH,

jte

--
John Earl | Chief Technology Officer
The PowerTech Group
19426 68th Ave. S
Seattle, WA 98032
(253) 872-7788 ext. 302
john.earl@xxxxxxxxxxxxxxxxxx
www.powertech.com 
 

--