Re: Private authority report

[email protected] Fri, 15 Jun 2007 16:20:44 -0700
Newsgroups gmane.comp.systems.as400.security
Message-ID <[email protected]>
Bryan_Burns wrote:

> I did that by searching for "in use" but would have to search 49 times.  And I only got a job log because I had time to request one while it the GRTOBJAUT was running.  Hate to think where I'd be without a joblog.  I'd also hate to implement object level security if it's so difficult to get such a list.

> -----Original Message-----
> 
> Absent a Vendor provided security tool that will list the authorities of
> objects in the library, you can review your joblog to see which items
> were not changed.

Bryan:

Apologies for a late response; sometimes work needs attention.

Although numerous details may need to be added, you _might_ get by with:

1. DSPUSRPRF USRPRF(ODBCUSER) TYPE(*OBJAUT) OUTPUT(*OUTFILE)
2. DSPOBJD OBJ(AMFLIBE/*ALL) OBJTYPE(*FILE) OUTPUT(*OUTFILE)

Given those two files, a SELECT over the first file WHERE 
OALIB='AMFLIBE' AND NOT OAOBJ IN( SELECT ODOBNM FROM the 2nd file), 
should be about all there is to it.

All kinds of variations are possible.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
        253-479-1416
Fax    253-872-7904
http://www.powertech.com
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.