Re: Authority on Java calls

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

To the swapped-profile idea - I think it was an ISV support person at 
IBM who said to change the effective GID or UID of a job - this is just 
like swapping profiles, just less intensive. This is done with one or 
the other API, qsyseteuid or qsysetegid.

HTH
Vern

On 10/8/2013 3:25 PM, Mark S Waterbury wrote:
> Justin:
>
> The IFS does not honor "adopted authority" -- it does not know or care
> whether the caller is Java or RPG or whatever ... =-O     So perhaps
> this is really the cause of your problem(s)?  If you search MIDRANGE-L
> or RPG400-L or other places on the web, I am sure you can find plenty of
> examples of how to use the "Swap Profile" API to swap to another user
> profile, e.g. for use whan accessing the IFS.  This is the standard way
> of dealing with these issues.
>
> NOTE:**if you swap profiles first, in your RPG code, then invoke Java,
> the Java code will also be running under that swapped-to profile.
>
> Hope that helps,
>
> Mark S. Waterbury
>
>   > On 10/8/2013 4:16 PM, Justin Taylor wrote:
> > Does that apply to all Java called out of RPG?  My issue is with an IFS file.  I could (probably) define and load a Java FileInputString object from within RPG and pass it into the Java program, but I assume that would still encounter the same authority roadblock.
> >
> >
> >
> >
> > -----Original Message-----
> > From: Dean, Robert [mailto:rdean@xxxxxxxxxxxx]
> > Sent: Monday, October 07, 2013 4:37 PM
> > To: RPG programming on the IBM i (AS/400 and iSeries)
> > Subject: RE: Authority on Java calls
> >
> > Java programs under IT4J (J9) don't adopt authority like Java programs under classic JVM.  Just an idea... You might be able to do something involving the profile swap API to swap the thread to the owner's profile.
> >
> >
> > ________________________________________
> > From: rpg400-l-bounces@xxxxxxxxxxxx [rpg400-l-bounces@xxxxxxxxxxxx] on behalf of Justin Taylor [JUSTIN@xxxxxxxxxxxxx]
> > Sent: Monday, October 07, 2013 4:18 PM
> > To: rpg400-l@xxxxxxxxxxxx
> > Subject: Authority on Java calls
> >
> > I have an RPGLE *SRVPGM that runs under USER(*OWNER).  That *SRVPGM calls a Java method (defined as an ExtProc(*java: : )).  The RPG code uses the authority of the object owner, while the Java method uses the current user's.  Is there a (relatively) easy way to get the Java to run under the owner's authority?
> > --
> > This is the RPG programming on the IBM i (AS/400 and iSeries) (RPG400-L) mailing list To post a message email: RPG400-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
> > or email: RPG400-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives at http://archive.midrange.com/rpg400-l.