Re: SQL0552 Not authorized to DROP PROCEDURE.

Chuck,

Issue found and solved, thank you for the advice. SYSROUTDEP was the
culprit.

DSPAUDJRNE ENTTYP(AF) USRPRF(FREDJW) JRNRCV(*CURRENT) OUTPUT(*PRINT)



2016-04-20-09.19.53.904960

AF A FREDJW SYSROUTDEP QSYS200182 *FILE


Clearly the SQL0552 is lacking accurate &complete information.


SYSROUTINE (for CREATE PROCEDURE) required restricted state which we hit
last month on all Lpars, SYSROUTDEP was not locked and we're moving
forward. Again, thank you.







On Wed, Apr 20, 2016 at 3:12 PM, CRPence <crpbottle@xxxxxxxxx> wrote:

On 20-Apr-2016 15:35 -0500, Joe Wood wrote:

<<SNIP>> I will review these links and the audit log journal
entries, <<SNIP>>

Those doc links are much more definitive in describing the required
"Authorization" for the DROP and CREATE request; much more so than the
tidbit offered in the msg SQL0552 -552 error, which mentions _only_ the
SYSPARMS *FILE.

There will very likely be a T-AF entry to easily reveal the origin; an
object to which the *PEON developer\users apparently lack the necessary
resource authority. That Authority Failure audit entry would correlate to
a msg MCH1001 exception [and corresponding EVENT] seen in a trace of the
failing-request being made.


--
Regards, Chuck

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.