Re: Edit Object Authority for Library, Program, File and User Security.....

I changed programs to usrprf(*owner), libraries to AUT(*use) and files to AUT(*exclude). Programs have usrprf(*owner). So in interactive environment if I call a program A directly from a menu the access to the files with *EXCLUDE now works. But I am getting CPF4101 error message when I am calling a program B from program A.


Additional Message Information
Message ID . . . . . . : CPF4104 Date sent . . . . . . : 04/29/10 Time sent . . . . . . : 09:15:51
Message . . . . : User not authorized to operation on file xxxx01 in *LIBL, member, device, or program device *N.
Cause . . . . . : User not authorized to the file, library, member, or device/program device. Recovery . . . : Obtain authority from the security officer or object owner, and then try the request again.
Simon Coulter wrote:

On 28/04/2010, at 6:47 AM, Jerry Adams wrote:

If USERA is running PGMA in LIBA (with adopted authority suitable for the file), and the file/table exists in LIBB (to which USERA is *Exclude), would the program be able to access the file?

As long as the owner of PGMA has suitable authority to the file in LIBB then yes.

Would a USROPN or a system-open make any difference?

No.

A comment on the previous appends: If you need to add an *EXCLUDE library to the library list then this must be done either in an adopting program or from a program that inherits authority from an adopting program higher in the stack. As I recall such a library cannot be specified in the user's sign-on job description because the initial library is built before the initial program is given control thus adopted authority is not yet in place.

Regards,
Simon Coulter.
--------------------------------------------------------------------
FlyByNight Software OS/400, i5/OS Technical Specialists

http://www.flybynight.com.au/
Phone: +61 2 6657 8251 Mobile: +61 0411 091 400 /"\
Fax: +61 2 6657 8251 \ /
X
ASCII Ribbon campaign against HTML E-Mail / \
--------------------------------------------------------------------