Re: Authority Help Needed........

["Jim Franz" <franz400@xxxxxxxxxxxx>]

> If we set the library to PUBLIC *EXCLUDE, this means no one can access the
> library or anything in it unless we give them permission to, correct?

Yes - except someone with *allobj authority

> Now if the above is correct; If we set the all the objects in the library
to
> PUBLIC *EXCLUDE and have a GROUP profile added to the library, can the
users
> of the group profile access the objects in the library or do we have to
add
> the group profile to the objects as well?

Having authority to a library only lets you in the door to the objects in
that lib. User or
Group or *Public must still be authorized to the object.

Good explanation in book "Implementing AS/400 Security" 4th edition by Carol
Woodbury and Wayne Madden. Also Info Center Tips & Techniques for Securing
iSeries (not exact title, but is one of the supplemental manuals).
hth
jim franz
----- Original Message -----
From: "Segars, Steven " <Steven_Segars@xxxxxxx>
To: <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, April 17, 2003 7:50 AM
Subject: Authority Help Needed........


> I looked thru the archives and didnt find anything that looked like what I
> needed, so I need to ask yall about it. We have a user who want to limit
its
> customers to library level authority. My question is:
>
> If we set the library to PUBLIC *EXCLUDE, this means no one can access the
> library or anything in it unless we give them permission to, correct?
>
> Now if the above is correct; If we set the all the objects in the library
to
> PUBLIC *EXCLUDE and have a GROUP profile added to the library, can the
users
> of the group profile access the objects in the library or do we have to
add
> the group profile to the objects as well?
>
> TIA
>
> Steven Segars
> AS/400 Certified Specialist/Administrator
> CSX Technology
> Work: 904-633-5650
> Fax:   904 633-1051
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo.cgi/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>