RE: GRTOBJAUT...does anyone know

You can Grant and Revoke Authority even on locked Objects.

From a presentation by Scott Forstie

Grant and Revoke without a lock 

Challenge: Seemingly impossible to make DDL changes in production 
Response: ALLOW_DDL_CHANGES_WHILE_OPEN - QAQQINI control 
Benefit: Ability to deploy security changes without quiescing user activity 
Enhanced: GRANT and REVOKE (SQL) Grant Object Authority (GRTOBJAUT), and
Revoke Object Authority (RVKOBJAUT) CL command

From the following document.

www.semiug.org/2019/docs/IBM%20i%207.4%20and%20TR%20Announcements%20-%20Octo
ber%202019.pdf

Rob W.


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org> On Behalf Of
Michael Quigley
Sent: Tuesday, May 12, 2026 12:25 PM
To: [email protected]
Subject: RE: GRTOBJAUT...does anyone know

I would use the SQL solution also. If you run into any object locks, etc.,
you're going to have a real chocolate mess trying to get through everything.
If you have a dedicated system, it might not be so bad. But the other
advantage would be a chance to get familiar with using the SQL
services--that alone could pay dividends.

Thanks,
Michael Quigley
Computer Services
www.TheWay.org

> -----Original Message-----
> message: 1
> date: Mon, 11 May 2026 16:44:05 -0500
> from: Vern Hamberg via MIDRANGE-L <[email protected]>
> subject: Re: GRTOBJAUT...does anyone know
> 
> The SQL solution Rob and I suggested will take 2, maybe 3 minutes - 
> OK, maybe 5!
> 
> *Regards*
> 
> *Vern Hamberg*
> 
> IBM Champion 2025 <cid:[email protected]> CAAC 
> (COMMON Americas Advisory Council) IBM Influencer 2023
> 
> 
> On 5/11/2026 4:36 PM, Don Brown via MIDRANGE-L wrote:
> >     For 8000 objects I would just run the grtobjaut command on all
objects.
> >
> >     Unless there is a requirement to know which objects need to be
updated.
> >
> >     This will take a minute whereas writing a program will take much
longer
> >     relatively speaking.
> >
> >     My 2 cents
> >
> >     Cheers
> >     Don
> >
> >     ?
> >
> >     Don Brown
> >
> >     Senior Consultant
> >     ?
> >     [1]OneTeam IT Pty Ltd
> >     P: 1300 088 400
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected] To subscribe,
unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support-FMtJrHiV//lnDLsaKlm4mFaTQe2KTcn/@public.gmane.org for any subscription related
questions.

.
-- 
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request-+hD5IHI5Xscn3HwCXmMcX9BPR1lH4CV8@public.gmane.org
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support-FMtJrHiV//lnDLsaKlm4mFaTQe2KTcn/@public.gmane.org for any subscription related questions.