Re: IFS folder and contents read only access for a specified user

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

Paul

Basically, private authorities are checked first and are used. So define 
the limited access you want for this person and leave *PUBLIC alone - I 
think that's right?

Could be better to set up an authorization list with the limited 
authority for each one you want. Might need to put an entry for *PUBLIC 
in there, too, it's been far too long.

The security reference has a chapter or section with flowcharts on how 
the system checks authority - well worth looking at - for 6.1, try this -

http://www-01.ibm.com/support/knowledgecenter/ssw_ibm_i_61/rzarl/rzarlchkaut.htm

HTH
Vern

On 3/12/2015 3:34 PM, Steinmetz, Paul wrote:
> I need to restrict access to an IFS folder, contents, and subfolders for a specific user.
> New items arrive in this folder 3x per day.
> Currently, the folder permissions are as below.
>
> At first, it was decided to make a copy of the folder for the restricted user.
> This will be a manual process, might get messy/sloppy.
>
> Another approach would be to give only that user read only access.
>
> Is this easily done?
> How?
> Would *PUBLIC have to change?
>
> 		     	--Object Authorities--	-------------Data Authorities-------------
> 			Exist  Mgt  Alter  Ref	Objopr  Read  Add  Update  Delete  Execute
> *PUBLIC     *RWX         X     X     X     X		X      X     X     X       X        X
> CS_GRP      *RWX         X     X     X     X		X      X     X     X       X        X
>
> Thank You
> _____
> Paul Steinmetz
> IBM i Systems Administrator
>
> Pencor Services, Inc.
> 462 Delaware Ave
> Palmerton Pa 18071
>
> 610-826-9117 work
> 610-826-9188 fax
> 610-349-0913 cell
> 610-377-6012 home
>
> psteinmetz@xxxxxxxxxx
> http://www.pencor.com/