RE: Locking users out of an IFS directory

Is that any exit program approach by any chance?

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of James H. H. Lampert
Sent: 16 January 2010 00:26
To: Midrange Systems Technical Discussion
Subject: Re: Locking users out of an IFS directory

Scott Klement wrote:

Sorry, I wasn't intending for you to use DTAAUT(*RX) by itself. I was
intending for you to my previous response and replace DTAAUT(*EXCLUDE)
with DTAAUT(*RX). So you'd have this:

CHGAUT OBJ('/my/dir') USER(my-user) DTAAUT(*RX) OBJAUT(*NONE)

in particular, OBJAUT(*OBJEXIST) would give the user permission over the
existence of objects (ability to create/delete). OBJAUT(*NONE) should
remove that ability.

That *was* what I'd initially tried. Option 1 in the list screen of
WRKAUT (which is what I'd used) *does* default to OBJAUT(*NONE).

At any rate, I've determined that (given that being locked out of
changing the directory doesn't lock one out of changing existing stream
files) IFS authorities are the wrong approach to the problem at hand,
and I've recommended an alternate solution to the powers that be.

--
JHHL
(Off-duty in less than an hour)