RE: EDTOBJAUT from a CL program

["Ingvaldson, Scott" <Scott.Ingvaldson@xxxxxxxxxx>]

Perhaps: CHGOBJOWN OBJ(LIB/NAME) NEWOWN(NEWOWNER) CUROWNAUT(*REVOKE)


Regards,
 
Scott Ingvaldson
Senior IBM Support Specialist


-----Original Message-----
From: BBaase@xxxxxxxxxxxxx [mailto:BBaase@xxxxxxxxxxxxx] 
Sent: Thursday, August 11, 2011 3:35 PM
To: Midrange Systems Technical Discussion
Subject: Re: EDTOBJAUT from a CL program

I want to revoke all authorities.  In most cases, the user profile I
want 
to remove is the original creator of the object, who is now in a group 
that has *USE authority, so I want the individual totally removed.  I 
don't want to see it there, even if the level is correct.  I guess what
I 
am saying is that revoking the authority is not the real issue; it is 
getting the profile to not be listed there that is the real issue.

OK.  I just got it to work, but I see what you mean about not being able

to revoke what is not there. 

In order to get rid of a user profile that had *all authority, I had to 
run two commands:

RVKOBJAUT OBJ(JRBLIB/ARCM11FX) OBJTYPE(*PGM) USER(MNUMBERS) AUT(*DLT
*REA
D *UPD *EXECUTE) 

 RVKOBJAUT OBJ(JRBLIB/ARCM11FX) OBJTYPE(*PGM) USER(MNUMBERS) AUT(*ADD
*OBJ
OPR *OBJALTER *OBJEXIST *OBJMGT *OBJOPR *OBJREF)   

So now I just have to figure out what to do when a user has *change or 
*use or even Userdef  It just seems like there should be an easier way.