Re: Security Issue compiling a logical

On 17-Sep-2014 16:26 -0500, Marvin Radding wrote:

I am attempting to solve a rather mysterious security problem. I am
trying to compile a logical file but receive a 'Not authorized to all
objects needed' failure message.

The physical file authority looks like <<SNIP>>

One conspicuous potential issue, there are other /objects needed/ beyond just a referenced PF; the reason the error message is decidedly generic in wording. The Library (*LIB) object requires the user have *ADD to /insert/ the new Logical database *FILE object. No matter what object, with auditing enabled, there should be an Authority Failure (T-AF) Audit Entry logged to identify to what the requester is not authorized.

What do I need to change so the compile will work? I am a member of
the PGMRAUTL group.

The authorities required [other than to self and group] to effect Create Logical File (CRTLF) are documented at the following link; notice the nuances for Keyed Logical vs Arrival Access Path LF:
<http://www.ibm.com/support/knowledgecenter/ssw_ibm_i_71/rzarl/rzarlfilecmd.htm>

Contrary to another reply to the above message [last month; I'm still catching up], object existence rights are *not* required for the create; object Management or Alter *may* be required, according to the above doc link.