Re: Program user profile, adopted authority, and named activation groups

I do see a note
https://www.ibm.com/docs/en/i/7.4.0?topic=management-service-programs-activation-groups

For the ACTGRP(name) option, the service program functions as follows:
- Separate address space for variables, if using single-level storage model.
The client program cannot manipulate pointers to address your working
storage. This may be important if your service program is running with
adopted authority.

But no more details, and I don't recall ever seeing an issue.

By chance, is the user specifically excluded from the table? That would
override the adopted authority.

Charles

On Mon, Nov 10, 2025 at 2:43 PM David Gibbs via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

On Mon, Nov 10, 2025 at 3:07 PM Rob Berendt <robertowenberendt@xxxxxxxxx>
wrote:

Um, you aren't talking about IFS stuff, are you? IFS and adopted

authority

don't play well together. The only point to adopted authority with IFS

is

simply to adopt enough authority to use the profile handle APIs.

No, normal db2 tables.

We're getting a CPF5134 error for some reason that we can't determine.

It's as if the job is losing authority that it _appears_ it previously had.

The table in question is owned by group profile A, and A has *ALL
authority.

Program B, which is owned by group profile A also, has "User profile" =
*OWNER and "Use adopted authority = *YES, calls a procedure in service
program C.

Service program C is owned by group profile A, but "User profile" = *USER
and "Use adopted authority = *YES.

David


--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding in the American Diabetes Association's Tour de Cure to raise
money for diabetes research, education, advocacy, and awareness. You can
make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

I may have diabetes, but diabetes doesn't have me!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.