×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
I have a list of objects. The Violation types are all "A" (Not authorized to object).
There isn't a practical way to match the audit journal against actions in RDi, since there doesn't appear to be any indication in RDi when the AF occurs.
We don't have another developer user to compare against. Myself and the other existing dev are also admins, so we have extra authority and special authorities.
In case it matters, here's the list of distinct objects:
Violation Object Library Object
type name name type
A QADBCCST QSYS *FILE
A QADBFCST QSYS *FILE
A QADBFDEP QSYS *FILE
A QADBIFLD QSYS *FILE
A QADBKFLD QSYS *FILE
A QADBPKG QSYS *FILE
A QADBXCTLS QSYS *FILE
A QADBXCTLSD QSYS *FILE
A QADBXMQT QSYS *FILE
A QADBXPRDS QSYS *FILE
A QADBXREF QSYS *FILE
A QADBXSFLD QSYS *FILE
A QADBXTRIGB QSYS *FILE
A QADBXTRIGC QSYS *FILE
A QADBXTRIGD QSYS *FILE
A QAQA01BBPY QUSRSYS *FILE
A QASUTXTSRC QPDA *FILE
A SYSCHARSET QSYS2 *FILE
-----Original Message-----
From: Steve Ferrell via WDSCI-L [mailto:wdsci-l@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, July 16, 2019 2:26 PM
To: Rational Developer for IBM i / Websphere Development Studio Client for System i & iSeries <wdsci-l@xxxxxxxxxxxxxxxxxx>
Cc: Steve Ferrell <Steve.Ferrell@xxxxxxxxxxxxxxx>
Subject: Re: [WDSCI-L] Authority for RDi
Hi Justin,
Here's a list of the Authority Failures (AF) journal entry codes for QAUDJRN. This document will help you determine what the failures are, and how to correct them.
https://www.ibm.com/support/knowledgecenter/en/ssw_ibm_i_73/rzarl/rzarlf06.htm
It will help to know what objects/what actions (debug, edit, or compile)/and the Violation type. All of that information should be in QAUDJRN.
I'd also compare the new users profile to your own to see if they are setup with the same authorities you are. (And the same group profile.)
We completely agree that *ALLOBJ is not a good option!
If you're having trouble reading the entries, please contact IBM Support with the information above and we can help you with these entries.
Steve Ferrell
w. www.helpsystems.com
midrange.com
