RE: Authority to libraries

[qsrvbas@xxxxxxxxxxxx (Tom Liotta)]

midrange-l-request@xxxxxxxxxxxx wrote:

>  11. RE: Authority to libraries (John Earl)
>
>> I exclude a user from a library.  I then create a program that needs to
>> execute a program in that library.  I wanted the user to have access only
>> through programs.   I tried to do this by compiling the program with
>> *owner authority (the owner has *all authority to the library and objects
>> in the library).  When I try to run the program using the excluded user I
>> get an error saying the user is not authorized to the library.  What am I
>> doing wrong?
>
<snip>
> or you've selected the USEADPAUT(*NO) parameter on the program which
>prevents you from passing the adopted authority down the program stack.

Just to make certain I understand and that the issue is clear...

I understood USEADPAUT() to determine whether a program can use authority that 
was adopted above in the program stack rather than whether the program will 
propagate it on down.

Assume Pgm1 is normal USRPRF(*USER), Pgm2 is USRPRF(*OWNER) and *PUBLIC *USE 
and owned by QSECOFR and Pgm3 is USRPRF(*USER) and USEADPAUT(*NO). Pgm1 calls 
Pgm2 which calls Pgm3. Pgm2 just happens to use adopted authority to call Pgm3 
and Pgm3 includes a command line.

The point of compiling Pgm3 as USEADPAUT(*NO) would be to restrict it from 
using the QSECOFR authority that was adopted above. By setting this attribute 
for Pgm3, you only need to set it once. If on the other hand the attribute 
needed to be set instead for Pgm2, then it would need to be set for programs 
Pgm4, Pgm5 and every other caller of Pgm3.

No?

Tom Liotta


-- 
-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertechgroup.com


__________________________________________________________________
Try AOL and get 1045 hours FREE for 45 days!
http://free.aol.com/tryaolfree/index.adp?375380

Get AOL Instant Messenger 5.1 for FREE! Download Now!
http://aim.aol.com/aimnew/Aim/register.adp?promo=380455