Re: Security Question: RSTLIB's *BEFORE (RSTUSRPRF and RSTAUT)

[Ed Fishel <edfishel@xxxxxxxxxx>]

>Unfortunately yesterday we went ahead with all of the
>RSTLIB's first and now we will try to run the (RSTUSRPRF and RSTAUT)
>.. some of the profiles were missing in the target system and we will not
>have another chance to Re-Do this sequence of restores until next month.
>
>My question is . . . : How good my RSTUSRPRF (*ALL Profiles) followed
>by the RSTAUT command .. *AFTER all of the RSTLIB's were executed ?

Jorge,

When an object is restored and its owning user profile does not exist on
the system the object will be owned by QDFTOWN. Also, when a program or
service program that adopts it owner's user profile is restored and the
owning user profile does not exit, ownership is given to QDFTOWN, public
authority is changed to *EXCLUDE, and any authorization list is removed.

Restoring the missing user profiles and doing RSTAUT will not correct the
ownership or public authorities of the objects. If you do not do anything
to fix this and just restore the objects again, the system will take their
ownership and public and private authorities from the objects on the
system. In other words it will not fix the problem.

Without knowing more about your system at the time of the restore and the
applications you use, it is hard to know how may problems this will cause.

Ed Fishel,
edfishel@xxxxxxxxxx