Re: Authority Help Needed........

["Jim Franz" <franz400@xxxxxxxxxxxx>]

> So if I have a GROUP profile called GRPPUB and the library is set to
PUBLIC
> *EXCLUDE, with GRPPUB having authority to it, then that allows them into
the
> library. BUT if I have an object in that library set to PUBLIC *EXCLUDE
> withOUT the GRPPUB group profile added to that object, then they cant
access
> it. correct?

Yes (assuming the program your using to access the object does not carry the
authority.
- just because I get in the "door" (library) doesn't mean I have access to
everything
in the lib.
The Tips & Tools supplemental manual has a chapter (6) on one method of
moving to
object authority & groups. This method involves your public Exclude, but the
program
accessing the lib (like a menu option) adopts authority. It's too much to
lay out here.
I would urge every SysAdmn or Secofr to read this manual.
http://publib.boulder.ibm.com/iseries/v5r1/ic2924/books/c4153005.pdf
hth
jim



----- Original Message -----
From: "Segars, Steven " <Steven_Segars@xxxxxxx>
To: <midrange-l@xxxxxxxxxxxx>
Sent: Thursday, April 17, 2003 10:00 AM
Subject: Re: Authority Help Needed........


> <<Having authority to a library only lets you in the door to the objects
in
> that lib. User or Group or *Public must still be authorized to the
object.>>
>
> So if I have a GROUP profile called GRPPUB and the library is set to
PUBLIC
> *EXCLUDE, with GRPPUB having authority to it, then that allows them into
the
> library. BUT if I have an object in that library set to PUBLIC *EXCLUDE
> withOUT the GRPPUB group profile added to that object, then they cant
access
> it. correct?
>
> Steven Segars
> AS/400 Certified Specialist/Administrator
> CSX Technology
> Work: 904-633-5650
> Fax:   904 633-1051
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo.cgi/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>