Re: Private authority report

"Gary Monnier" <gary.monnier-Ua2wos9bJ7y1Z/[email protected]> Tue, 12 Jun 2007 12:57:13 -0700
Newsgroups gmane.comp.systems.as400.security
Message-ID <[email protected]>
Try this write a CL program to do the following.

1. DSPOBJD to an outfile. 
2. Read the outfile.
3. DSPOBJAUT to an outfile.
4. Call another CL program that scans the outfile from 3 for user
ODBCUSER.
5. If no ODBCUSER or the incorrect authority send yourself a message.

-----Original Message-----
From: security400-bounces+gary.monnier=powertech.com-Zwy7GipZuJhWk0Htik3J/[email protected]
[mailto:security400-bounces+gary.monnier=powertech.com-Zwy7GipZuJhWk0Htik3J/[email protected]] On
Behalf Of Burns, Bryan
Sent: Tuesday, June 12, 2007 12:36 PM
To: security400-Zwy7GipZuJhWk0Htik3J/[email protected]
Subject: [Security400] Private authority report


I performed a GRTOBJAUT OBJ(AMFLIBE/*ALL) OBJTYPE(*FILE) USER(ODBCUSER)
AUT(*USE) and the joblog shows "Authority given to 5886 objects. Not
given to 49 objects".  How can I get a list of just the 49 files in
library AMFLIBE that weren't given authority? 

The files for most of the 5886 objects that were given authority look
like this:

User        Authority
*PUBLIC     *CHANGE  
AMAPICS     *ALL     
ODBCUSER    *USE 

I need a list of just the 49 files in library AMFLIBE in which ODBCUSER
has no private authority.

Bryan Burns
IBM Certified Specialist - iSeries System Command Operations V5R2 
M.I.S. Department
ECHO, Incorporated
www.echo-usa.com

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To
subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.



_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.