RE: Not authorized to __ in library QSYS Object type *SPACE

["John Allen" <jallen@xxxxxxxxxxx>]

Vern,
Thanks for this info, at least it gets me pointed in the right direction.

I have granted the new User profile (me) *ALL authority to library QSYS
I also granted *ALL authority to the API QLPCDRST
This should cover the first two.

I am not requesting any information back from the API so I do not specify a
User Space name, so there is nothing for me to grant authority to for the
last three correct?

Richard

 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Vern Hamberg
Sent: Tuesday, July 22, 2003 1:17 PM
To: Midrange Systems Technical Discussion
Subject: Re: Not authorized to __ in library QSYS Object type *SPACE

John

IBM tightened this thing down awhile ago. Here are the authorities from the 
API description:

Authorities and Locks
API Public Authority
*EXCLUDE
QSYS Library Authority
*CHANGE
User Space Authority
*CHANGE
User Space Library Authority
*USE
User Space Lock
*EXCLRD

Note the need for *CHANGE authorization to library QSYS. You don't just 
want to hand that out, so you probably need either to swap to QSECOFR (or 
another profile with enough authority) before calling the API, or have 
QSECOFR (or that other profile) own the program and use USRPRF(*OWNER). We 
do something like this in our CD-ROM Studio premastering product.

HTH

Vern

At 12:56 PM 7/22/2003 -0400, you wrote:
>I have been using a program we have to make AS/400 CD's that involves the
>IBM program  QLPCDRST
>
>Everything works fine until I started using a different User Profile. This
>new User profile does not have as
>
>much authority as the original one I was using. But with a message like
this
>it is hard for me to determine what
>
>I do not have authority to. Since there appears to be more then one space
>after "object" it appears the object name is blank
>
>I can go back and use the original profile and everything works fine. Since
>it has Security Officer, ALLOBJ etc I would expect it to work.
>
>Has anyone seen this message before or can anyone point me to the problem.
>
>Message ID . . . . . . :   CPF9802       Severity . . . . . . . :   40
>
>Message type . . . . . :   Escape
>
>Date sent  . . . . . . :   07/22/03      Time sent  . . . . . . :
12:39:06
>
>Message . . . . :   Not authorized to object  in QSYS.
>Cause . . . . . :   You do not have the correct authority for object  in
>   library QSYS type *SPACE.
>
>Thanks in advance for your help
>
>John


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.