Re: authority on physical vs. logical

Ok, been a while since I used this..

But Paul is correct in that the user needs *READ access to the data in the
physical. The key is not to give them *OBJOPR authority to the physical.

http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_61/rzarl/rzarllogical.htm

Thus they can't open the physical directly and can only see the data
allowed by the logical.

HTH,
Charles


On Mon, Oct 6, 2014 at 10:28 AM, paultherrien <
paultherrien@xxxxxxxxxxxxxxxxxx> wrote:

I think you need to give read access to the physical.
If the user cannot have access to the physical data, then a view is not
going to
give it to the user.

On October 6, 2014 at 10:22 AM Gqcy <gmufasa01@xxxxxxxxx> wrote:


I am attempting to do a read via SQL (SQLRPGLE)...
I must have something not correct...


On 10/6/2014 9:08 AM, Charles Wilt wrote:

That should allow you to read the data using SQL or RPG RLA...

But some operations such as CPYF require access to the PF.

What are you trying to do?

Charles

On Mon, Oct 6, 2014 at 9:44 AM, Gqcy<gmufasa01@xxxxxxxxx> wrote:

I am trying to lock down sensitive data.
I have given:
TESTUSER *EXCLUDE
authority to the physical,
and
TESTUSER *USE on the view I created...

I get a Not authorized to the physical...

what do I need to do to allow access to the
view, but not have access to the physical???

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Paul Therrien
Andeco Software, LLC
paultherrien@xxxxxxxxxxxxxxxxxx
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.