Re: Private authority report

If you succeed to get all of the files' authorities into a single table,
then the following SQL will list only those objects with the incorrect
authority. Suppose the authority table is "dspusraut".

SELECT u.OANAME, u.OALIB, u.OATYPE
FROM dspusraut u
WHERE not  exists (
                   SELECT x.OANAME
                   FROM dspusraut x
                   WHERE  u.oaname=x.oaname and u.oalib=x.OALIB and u.OATYPE=
x.oatype
                                 and x.OAUSR = 'ODBCUSR')
GROUP BY u.OANAME, u.OALIB, u.OATYPE

-- 
Regards,
Shalom Carmel
-----------------------
www.venera.com




> date: Tue, 12 Jun 2007 14:35:49 -0500
> from: "Burns, Bryan" <Bryan_Burns-4pQSJKWblQ5Wk0Htik3J/[email protected]>
> subject: [Security400] Private authority report
>
> I performed a GRTOBJAUT OBJ(AMFLIBE/*ALL) OBJTYPE(*FILE) USER(ODBCUSER)
> AUT(*USE) and the joblog shows "Authority given to 5886 objects. Not given
> to 49 objects".  How can I get a list of just the 49 files in library
> AMFLIBE that weren't given authority?
>
> The files for most of the 5886 objects that were given authority look like
> this:
>
> User        Authority
> *PUBLIC     *CHANGE
> AMAPICS     *ALL
> ODBCUSER    *USE
>
> I need a list of just the 49 files in library AMFLIBE in which ODBCUSER
> has no private authority.
>
> Bryan Burns
> IBM Certified Specialist - iSeries System Command Operations V5R2
> M.I.S. Department
> ECHO, Incorporated
> www.echo-usa.com
>
>
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.