× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. July 2021

Re: Deleting IFS Object - Authorities Question

Here's another funny thing.. .I can use the user ID that "doesn't have
authority" to the object to rename it and change the authority to *RWX *ALL.

I know this is probably something unique to Java, but I'm curious why and
what would be the fix so that the Java routine acts the same as far as
adopted authority as everything else.

On Thu, Jul 29, 2021 at 4:28 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

HEre's some more info I got testing.

It's a java program creating the file, and here are the authorities for
the file when created:

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RW X X X X
TEST *RW


Now, the directory has this authority:

Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

So the issue seems to be the java application isn't adopting
authority like other things do (IFS commands, APIs, etc)

On Thu, Jul 29, 2021 at 12:19 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Ya, that's what I'm finding. But I am trying to help them figure out
why... I don't think they were removed, they were just never granted. And
the user in question is the one running the application to create it in the
first place.

All my testing has shown the file adopts authorities from the directory.

Of course, if they run it with a user with *ALLOBJ it works fine and the
file is removed.

On Thu, Jul 29, 2021 at 12:14 PM Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

If by "the user profile appears to not have any object authorities" you
mean this

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX

Then it would appear that the owner's authorities have been removed and
would explain why they can't delete the file.

Normally the owner (CWILT5) should have
Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX X X X X


Charles


On Thu, Jul 29, 2021 at 11:03 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

The user profile appears to not have any object authorities. It also
doesn't have private authority to the directory.

*PUBLIC has exist, mgt, alter and ref. The user doesn't have any of
these.



On Thu, Jul 29, 2021 at 11:33 AM Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

Does the user happen to have a private authority to the directory?

That would take precedence over *PUBLIC.

*RWX applies to the contents...

WHat are the object authorities?
Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

Charles

On Thu, Jul 29, 2021 at 10:20 AM Brad Stone <bvstone@xxxxxxxxx>
wrote:

What authorities to the parent directory and file does a profile
need
to
have to be able to delete a stream file?

I've run into a case where *PUBLIC has *RWX authority to the
directory
and
*RW authority to the file.

The User ID that is running the RMVLNK command has *RW authority
to the
file and is the owner, yet they aren't able to delete the file.
It was
originally created under that user profile as well.

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail, or
any
Cloud
Provider!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com



As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.