Re: Deleting IFS Object - Authorities Question

Neither Java nor IFS objects support adopted authority.

Charles

On Thu, Jul 29, 2021 at 3:36 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Here's another funny thing.. .I can use the user ID that "doesn't have
authority" to the object to rename it and change the authority to *RWX
*ALL.

I know this is probably something unique to Java, but I'm curious why and
what would be the fix so that the Java routine acts the same as far as
adopted authority as everything else.

On Thu, Jul 29, 2021 at 4:28 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

HEre's some more info I got testing.

It's a java program creating the file, and here are the authorities for
the file when created:

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RW X X X X
TEST *RW


Now, the directory has this authority:

Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

So the issue seems to be the java application isn't adopting
authority like other things do (IFS commands, APIs, etc)

On Thu, Jul 29, 2021 at 12:19 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Ya, that's what I'm finding. But I am trying to help them figure out
why... I don't think they were removed, they were just never granted.

And

the user in question is the one running the application to create it

in

the

first place.

All my testing has shown the file adopts authorities from the

directory.

Of course, if they run it with a user with *ALLOBJ it works fine and

the

file is removed.

On Thu, Jul 29, 2021 at 12:14 PM Charles Wilt <charles.wilt@xxxxxxxxx

wrote:

If by "the user profile appears to not have any object authorities"

you

mean this

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX

Then it would appear that the owner's authorities have been removed

and

would explain why they can't delete the file.

Normally the owner (CWILT5) should have
Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX X X X X


Charles


On Thu, Jul 29, 2021 at 11:03 AM Brad Stone <bvstone@xxxxxxxxx>

wrote:

The user profile appears to not have any object authorities. It

also

doesn't have private authority to the directory.

*PUBLIC has exist, mgt, alter and ref. The user doesn't have any

of

these.

On Thu, Jul 29, 2021 at 11:33 AM Charles Wilt <

charles.wilt@xxxxxxxxx>

wrote:

Does the user happen to have a private authority to the

directory?

That would take precedence over *PUBLIC.

*RWX applies to the contents...

WHat are the object authorities?
Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

Charles

On Thu, Jul 29, 2021 at 10:20 AM Brad Stone <bvstone@xxxxxxxxx>

wrote:

What authorities to the parent directory and file does a

profile

need

to

have to be able to delete a stream file?

I've run into a case where *PUBLIC has *RWX authority to the

directory

and

*RW authority to the file.

The User ID that is running the RMVLNK command has *RW

authority

to the

file and is the owner, yet they aren't able to delete the file.

It was

originally created under that user profile as well.

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365, Gmail,

or

any

Cloud

Provider!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any

subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription

related

questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.

Help support midrange.com by shopping at amazon.com with our

affiliate

link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com