Re: Object Authority for SQL Use

if you are on V7.3 you can use the new authority collection to help determine the minimum level of authority needed to access the files.

<snip>
Authority collection is a capability that is provided as part of the base operating system. At a high level, authority collection captures data that is associated with the run-time authority checking that is built into the IBM® i system. This data is logged to a repository provided by the system and interfaces are available to display and analyze the data. The intent of this support is to assist the security administrator and application provider in securing the objects in an application with the lowest level of authority that is required to allow the application to run successfully. By using the authority collection capability to remove or avoid excess authority, the overall security of the objects that are used by an application is improved.
</snip>

http://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/rzarl/rzarlautcol.htm

Bryan


Welly@OCBCNISP wrote on 12/22/2016 12:35 AM:

Hello All,

Need advice

Our developer are building application using SQL on Windows that accessing
some PF on iseries, we already giving *USE (GRTOBJAUT) for that PF but when
the SQL run, it says that it don't have the authority to access the host
resources.. Also when I check using QSYS2.SQL_CHECK_AUTHORiTY some of the
files status is 0

Can any body give clue where shouls I set the authority?