Re: Adopted authority and owner primary group

Tom Liotta <[email protected]> Wed, 19 Aug 2009 16:23:25 -0700
Newsgroups gmane.comp.systems.as400.security
Organization midrange.com
Message-ID <[email protected]>
Walter Nasich wrote:

> I am a little confused:
> 
> Here Dan says that is adopted:
> http://systeminetwork.com/article/adoption-authority-public-and-group-profile-misconceptions 
> 
> 
> Here in flowchart 8B, step #3:
> http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzarl/rzarladpchmh.htm 
> 
> "The system checks the private and primary group authorities for the 
> program owner."
> 
> I dont sure, whether I have a mistake or this functionality was enabled 
> from a recent release. I am working on v5r2.

Walter:

Make sure that you don't confuse the GRPPRF() and SUPGRPPRF() 
attributes of a profile with the concept of 'primary group'. They 
are different.

Is the owner of your program the "primary group profile" for the 
object that you want authority to? Use WRKOBJPGP for owner profile 
of your program to check its *PGP authorities. Or use DSPOBJAUT to 
see the "Primary group" of the object you want authority to.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
        253-479-1416
Fax    253-872-7904
http://www.powertech.com
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.