RE: IFS File CHGAUT Oddity

It's working as designed.  I've been down this road too.

http://publib.boulder.ibm.com/iseries/v5r1/ic2924/index.htm?info/cl/chgaut.htm

Restrictions: 

1.  A user must either be the owner of the object or have *ALLOBJ special 
authority to use this command on an object. 





-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of richard@xxxxxxxxxxx
Sent: Thursday, January 04, 2007 7:19 PM
To: midrange-l@xxxxxxxxxxxx
Subject: IFS File CHGAUT Oddity


Here's an interesting one:

We have a process where we need to do a CHGAUT command on an IFS file to 
change authorities. 

Ran into an odd situation where *PUBLIC has *RWX authority to an IFS file, 
but USERX cannot call the CHGAUT command to change authorities.  The file 
is owned by USERY.  USERY can call CHGAUT. 

Here's the error that occurs: CPFA0B1 - "Requested operation not allowed. 
Access problem." 

Hmmmm I thought.  Full object authority should allow me to run CHGAUT 
against an object. 

Next I added an individual user authority for USERX to the file and set 
the user's authority to *RWX on the file and gave the user full object 
authorities. 

Still CHGAUT failed when called by USERX. 

Here's the interesting thing.  USERX can still open/read/write or delete 
the file. 

Seems that only the owner of an IFS file or someone with *ALLOBJ authority 
can issue a CHGAUT command against an IFS file object even if they have 
full rights. 

Any thoughts on this ?

Thanks in advance. 

Regards,
Richard Schoen
RJS Software Systems Inc. 
"Providing Your....iNFORMATION NOW!"
Email: richard@xxxxxxxxxxxxxxx
Web Site: http://www.rjssoftware.com
Tel: (952) 898-3038
Fax: (952) 898-1781
Toll Free: (888) RJSSOFT