× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. July 2021

Re: Deleting IFS Object - Authorities Question

Yes, inherit is better. :)

I just found it odd that IBM commands and Java functions treat the
authorities differently. The owner wasn't the issue, it was the
authorities granted to the file.. with Java they weren't inherited from the
directory. Using IBM commands and even IFS APIs they were.

On Fri, Jul 30, 2021 at 8:56 AM Charles Wilt <charles.wilt@xxxxxxxxx> wrote:

Not sure I understand the question...

Java uses a system API to create objects, off the top of my head I don't
know which one.

I think the word you're looking for is "inherit"

When the directory is created, there's two parms
Create Directory (CRTDIR)

Type choices, press Enter.

Directory . . . . . . . . . . .

Public authority for data . . . *INDIR Name, *INDIR, *RWX, *RW...

Public authority for object . . *INDIR *INDIR, *NONE, *ALL...


But that controls *PUBLIC authority to a new object...

I know of no way to create a new object without the owner having full
authority.

In the WRKAUT screen, what's shown for Type, Pwener, Primary group and
authorization list?
Type . . . . . . . . . . . . . : STMF
Owner . . . . . . . . . . . . : CWILT5
Primary group . . . . . . . . : *NONE
Authorization list . . . . . . : *NONE



Charles


On Fri, Jul 30, 2021 at 7:18 AM Brad Stone <bvstone@xxxxxxxxx> wrote:

So, where does the authority come from when IFS objects are created using
APIs (which appear to be adopted from the directory) vs when Java creates
it (which makes no sense).

On Thu, Jul 29, 2021 at 9:57 PM Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

Neither Java nor IFS objects support adopted authority.

Charles

On Thu, Jul 29, 2021 at 3:36 PM Brad Stone <bvstone@xxxxxxxxx> wrote:

Here's another funny thing.. .I can use the user ID that "doesn't
have
authority" to the object to rename it and change the authority to
*RWX
*ALL.

I know this is probably something unique to Java, but I'm curious why
and
what would be the fix so that the Java routine acts the same as far
as
adopted authority as everything else.

On Thu, Jul 29, 2021 at 4:28 PM Brad Stone <bvstone@xxxxxxxxx>
wrote:

HEre's some more info I got testing.

It's a java program creating the file, and here are the authorities
for
the file when created:

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RW X X X X
TEST *RW


Now, the directory has this authority:

Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

So the issue seems to be the java application isn't adopting
authority like other things do (IFS commands, APIs, etc)

On Thu, Jul 29, 2021 at 12:19 PM Brad Stone <bvstone@xxxxxxxxx>
wrote:

Ya, that's what I'm finding. But I am trying to help them figure
out
why... I don't think they were removed, they were just never
granted.
And
the user in question is the one running the application to create
it
in
the
first place.

All my testing has shown the file adopts authorities from the
directory.

Of course, if they run it with a user with *ALLOBJ it works fine
and
the
file is removed.

On Thu, Jul 29, 2021 at 12:14 PM Charles Wilt <
charles.wilt@xxxxxxxxx

wrote:

If by "the user profile appears to not have any object
authorities"
you
mean this

Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX

Then it would appear that the owner's authorities have been
removed
and
would explain why they can't delete the file.

Normally the owner (CWILT5) should have
Data --Object Authorities--
User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X
CWILT5 *RWX X X X X


Charles


On Thu, Jul 29, 2021 at 11:03 AM Brad Stone <bvstone@xxxxxxxxx>
wrote:

The user profile appears to not have any object authorities.
It
also
doesn't have private authority to the directory.

*PUBLIC has exist, mgt, alter and ref. The user doesn't have
any
of
these.



On Thu, Jul 29, 2021 at 11:33 AM Charles Wilt <
charles.wilt@xxxxxxxxx>
wrote:

Does the user happen to have a private authority to the
directory?

That would take precedence over *PUBLIC.

*RWX applies to the contents...

WHat are the object authorities?
Data --Object Authorities--
Opt User Authority Exist Mgt Alter Ref

*PUBLIC *RWX X X X X

Charles

On Thu, Jul 29, 2021 at 10:20 AM Brad Stone <
bvstone@xxxxxxxxx

wrote:

What authorities to the parent directory and file does a
profile
need
to
have to be able to delete a stream file?

I've run into a case where *PUBLIC has *RWX authority to
the
directory
and
*RW authority to the file.

The User ID that is running the RMVLNK command has *RW
authority
to the
file and is the owner, yet they aren't able to delete the
file.
It was
originally created under that user profile as well.

Bradley V. Stone
www.bvstools.com
Native IBM i e-Mail solutions for Microsoft Office 365,
Gmail,
or
any
Cloud
Provider!
--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any
subscription
related
questions.

Help support midrange.com by shopping at amazon.com with
our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any
subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any
subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)
mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our
affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription
related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com


As an Amazon Associate we earn from qualifying purchases.

This thread ...
Follow-Ups:
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.