RE: EDTOBJAUT from a CL program

Perhaps: CHGOBJOWN OBJ(LIB/NAME) NEWOWN(NEWOWNER) CUROWNAUT(*REVOKE)


Regards,

Scott Ingvaldson
Senior IBM Support Specialist


-----Original Message-----
From: BBaase@xxxxxxxxxxxxx [mailto:BBaase@xxxxxxxxxxxxx]
Sent: Thursday, August 11, 2011 3:35 PM
To: Midrange Systems Technical Discussion
Subject: Re: EDTOBJAUT from a CL program

I want to revoke all authorities. In most cases, the user profile I
want
to remove is the original creator of the object, who is now in a group
that has *USE authority, so I want the individual totally removed. I
don't want to see it there, even if the level is correct. I guess what
I
am saying is that revoking the authority is not the real issue; it is
getting the profile to not be listed there that is the real issue.

OK. I just got it to work, but I see what you mean about not being able

to revoke what is not there.

In order to get rid of a user profile that had *all authority, I had to
run two commands:

RVKOBJAUT OBJ(JRBLIB/ARCM11FX) OBJTYPE(*PGM) USER(MNUMBERS) AUT(*DLT
*REA
D *UPD *EXECUTE)

RVKOBJAUT OBJ(JRBLIB/ARCM11FX) OBJTYPE(*PGM) USER(MNUMBERS) AUT(*ADD
*OBJ
OPR *OBJALTER *OBJEXIST *OBJMGT *OBJOPR *OBJREF)

So now I just have to figure out what to do when a user has *change or
*use or even Userdef It just seems like there should be an easier way.