I like Authorization lists, and I have used them a lot, but the unfortunate
thing with authorization lists is that if a user has *ALLOBJ, it makes no
difference whether that user is or is not on the authorization list. Unless
things have changed in the last 4 years since I last used one.