RE: Looking for a utility to change PUBLIC authority for most objects in a library

Rob,

Good point.

Actually, we do have files separated from the programs.  

There's just a few other "data" objects, mainly data queues, that are in the 
object library instead of being in the data library.

In addition, we are moving toward Application only access.  The programs and 
data are all owned by the same profile and the programs are USRPRF(*OWNER) but 
the data objects are not yet public(*EXCLUDE).

Charles Wilt
iSeries Systems Administrator / Developer
Mitsubishi Electric Automotive America
ph: 513-573-4343
fax: 513-398-1121
 

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx
> [mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of rob@xxxxxxxxx
> Sent: Thursday, March 03, 2005 8:29 AM
> To: Midrange Systems Technical Discussion
> Subject: Re: Looking for a utility to change PUBLIC authority for most
> objects in a library
> 
> 
> Unless you're ready to delve into the world of 'application 
> only access' 
> I'd be careful about generally making 'data' objects only 
> *CHANGE.  Seems 
> that a lot of member operations need *ALL access.  Test with all the 
> member operations that your users might run across.  Member 
> operations 
> include: RMVM, ADDPFM, CLRPFM, etc.
> We put objects that the user maintains into one library like 
> DHTDIVF for 
> File.  This may include files, data area's, etc.
> Static objects go into DHTDIVO for Objects.
> Couple of benefits.  One, your security situation can be more 
> broadswept. 
> You do have to be careful with programs in the 'O' library that adopt 
> authority.  The other benefit is that you may decide that you 
> only need to 
> backup the 'O' library on a weekly basis.
> You may want to move those excluded objects into another 
> library - if it 
> fits your business philosophy.
> 
> Rob Berendt
> -- 
> Group Dekko Services, LLC
> Dept 01.073
> PO Box 2000
> Dock 108
> 6928N 400E
> Kendallville, IN 46755
> http://www.dekko.com
> 
> 
> 
> 
> 
> "Wilt, Charles" <CWilt@xxxxxxxxxxxx> 
> Sent by: midrange-l-bounces@xxxxxxxxxxxx
> 03/02/2005 04:38 PM
> Please respond to
> Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
> 
> 
> To
> "Midrange Systems Technical Discussion \(E-mail\)" 
> <midrange-l@xxxxxxxxxxxx>, "RPG Programming Mailing List \(E-mail\)" 
> <rpg400-l@xxxxxxxxxxxx>
> cc
> 
> Subject
> Looking for a utility to change PUBLIC authority for most 
> objects       in 
> a library
> 
> 
> 
> 
> 
> 
> All,
> 
> Basically, I've got some libraries where a significant number 
> of objects 
> such as programs and commands currently have *PUBLIC 
> authority of *ALL. 
> (Note: I didn't set it up, I just inherited the mess ;-)
> 
> What I need to do is change these objects to *USE.
> 
> The tricky part is some objects have been set *PUBLIC 
> *EXCLUDE.  These 
> *EXCLUDE objects should not be changed, so I can't just 
> globally change 
> every object in the library.  Additionally, there are some 
> objects, such 
> as data queues that need to be changed from *ALL to *CHANGE 
> instead of 
> just *USE.  I'll need a way to make sure I change any "data" 
> type object 
> from *ALL to *CHANGE instead of *USE.
> 
> 
> I figured before writing my own utility, I'd see if anybody 
> had already 
> done this.
> 
> I'd appreciate any guidance or code anyone would be willing to share.
> 
> Thanks,
> 
> Charles Wilt
> iSeries Systems Administrator / Developer
> Mitsubishi Electric Automotive America
> ph: 513-573-4343
> fax: 513-398-1121
>  
> 
> -- 
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing 
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
> 
> -- 
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
> 
>