Re: Edit Object Authority for Library, Program, File and User Security.....

Alan,

That is not true. Adopted authority is passed on in the call stack.

Say user PETER calls program A, that is owned by PAUL and has USRPRF(*OWNER). During execution of A the combined authorities of PETER and PAUL are used. When program A calls program B, that is owned by MARY and has USRPRF(*OWNER), authorities of PETER, PAUL and MARY are used.

Exceptions:
- When a program has USEADPAUT(*NO) it 'breaks the chain';
- SQL statements; when you use SQL in your program and want to use adopted authority you have to use SQL setting DYNUSRPRF(*OWNER);
- Stream files; filesystems other than QSYS.LIB have no notion of adopted authority; you're on your own 'out there'.

Joep Beckeringh


Op 29-04-10 20:18, Alan Shore schreef:

You will have to do EXACTLY the same thing for Program B and whatever files
that program requires

Ah yes - Security.... it brings back memories.... NONE of them good, a real
pain the @#$$$$$ to get to the final result



Alan Shore
Programmer/Analyst, Direct Response
E:AShore@xxxxxxxx
P:(631) 200-5019
C:(631) 880-8640
"If you're going through Hell, keep going" - Winston Churchill