Re: How to retrieve all user profiles in an IFS object's authority

Thanks Scott. Apparently, this happens often enough that the support
people are tired of tracking this down and fixing it. Also, when the users
are halted from continuing, it quickly becomes a human metrics issue.

If the application runs into the issue where a user doesn't have sufficient
authority to remove others' authorities or to add *PUBLIC DTAAUT(*RWX)
OBJAUT(*ALL), the application could capture that and send an email to
support. I'm not sure how the users are set up authority-wise on
production.

- Dan

On Mon, Sep 10, 2018 at 3:43 PM, Scott Klement <midrange-l@xxxxxxxxxxxxxxxx>
wrote:

Dan,

Personally, I would catch the error, and then pop up a message telling the
user to contact the administrator (or whomever is appropriate) for
assistance. Someone familiar with authorities should be able to very
easily look at the files and fix the authority problems.

If you really need to get a listing of all user authorities (which seems
like a much more complicated solution) you could do so with the
Qp0lGetAttr() API. You could loop through the responses and remove those
authorities... but, to my mind, this seems like overkill.

And, of course, the user would need sufficient authority to remove the
other users' authority (remember, adopted authority won't work here) which
makes this even more complicated.

-SK