Re: [WEB400] Re: IFS Authority for a CGI job

[Simon Coulter <shc@xxxxxxxxxxxxxxxxx>]

On 17/07/2004, at 6:20 AM, Bob Cozzi wrote:

> Interesting. So each folder/directory is treated as a higher-level 
> object
> and needs its own authority? It doesn't propagate down? Or does it and 
> you
> were just starting at the wrong end?

If you have authority to a file in a library (*LIB) object can you get 
to that file if you have no authority to the library?

NO!

So why would you expect directories to be any different? You need to be 
able to navigate the path to get to the stream file. This is not an 
OS/400 thing. This is how permissions work on Unix.

This whole thread is a bit pointless. The required authorities for all 
operations are described in the Security Reference. Checking that would 
show you need *X to each directory in the path plus *W to the parent 
directory of the object (so you can remove the directory entry).

Regards,
Simon Coulter.
--------------------------------------------------------------------
   FlyByNight Software         AS/400 Technical Specialists

   http://www.flybynight.com.au/
   Phone: +61 3 9419 0175   Mobile: +61 0411 091 400        /"\
   Fax:   +61 3 9419 0175                                   \ /
                                                             X
                 ASCII Ribbon campaign against HTML E-Mail  / \
--------------------------------------------------------------------