CHGLIBOBJA -- Change Library Object Authorizations

CHGLIBOBJA CHANGE LIBRARY OBJECT AUTHORITIES TAASEFO
The Change Library Object Authorities command changes the owner, authorization list, and individual authorities of one or more objects in a library based on the output of the CVTLIBOBJA command. This may be used to help keep the authority information the same between libraries on different systems. You must have ALLOBJ authority to use CHGLIBOBJA. Assume you have two systems where a library must be the same in terms of objects and authorities. On the primary system, you would enter: CVTLIBOBJA LIB(xxx) OUTLIB(yyy) This would create the LIBOBJAUTP file in the named library. One record would be written for each user authorized to each object in the library. You then transfer the file to the second system. On the second system, you would enter: CHGLIBOBJA LIB(xxx) OBJAUTPLIB(yyy) The CHGLIBOBJA command takes the information from the LIBOBJAUTP file and attempts to change the corresponding objects in the named library: * If the owner differs, the owner is changed. If the authorization list differs, the authorization list is changed. All authorities to the corresponding object are revoked. All authorities from the LIBOBJAUTP file are added. If the user is GROUP, the group name is authorized if it exists. * A listing is created with the actions taken. Errors are posted such as the object does not exist, the owner or authorization list does not exist, the user does not exist, etc. Options ------- The simplest solution is to use CHGLIBOBJA on an entire library. Various options may be used: CVTLIBOBJA may be used to convert one or more libraries to the same LIBOBJAUTP outfile. CHGLIBOBJA requires a single library to be named for each use of the command. Only those records in the LIBOBJAUTP file that match the library name will be processed. The default is for all objects in the library to be processed. A generic or specific object name may be processed. ** The default is for all object types in the library to be processed. A list of up to 40 object types may be processed. Processing considerations ------------------------- The CVTLIBOBJA command creates the LIBOBJAUTP outfile with fields for both OBOBJA (normally contains USE, CHANGE ...) and the individual X's for authority in fields such as OAOPR, OAOMGT etc. When CHGLIBOBJA runs, it uses only the individual fields for the Xs (the Xs are changed to OBJOPR, OBJMGT ...) and not the OBOBJA field. When you display the object with DSPOBJAUT, the system displays the proper value for what would be OBOBJA. Consequently, if you are changing the LIBOBJAUTP file before using CHGLIBOBJA, you must change the individual fields and not the OBOBJA field. ALLOBJ special authority users ------------------------------- An ALLOBJ authority user may be specified as having less than ALL authority to an object (such as USE or EXCLUDE). This does not prevent the user from performing any function on the object. The listing will describe the authority as described by the object, but does not consider ALLOBJ users. CHGLIBOBJA escape messages you can monitor for ---------------------------------------------- None. Escape messages from based on functions will be re-sent. Command parameters CMD ------------------ LIB The library containing the objects to be changed. OBJAUTPLIB The library containing the LIBOBJAUTP file with the records created by the CVTLIBOBJA command. LIBL is the default. CURLIB may be entered. The LIBOBJAUTP file may contain records from multiple libraries, but only the library named in the LIB parameter will be processed. MBR The member of the OBJAUTPLIB file to be used. The default is FIRST. OBJ The object name or generic name to be changed. The default is ALL. OBJTYPE A list of up to 40 object types to be changed. The default is ALL. For a complete list of the object types that may be changed, use the command prompter. Restrictions ------------ You must have ALLOBJ special authority to use CHGLIBOBJA. Prerequisites ------------- The following TAA Tools must be on your system: CHKOBJ3 Check object 3 EDTVAR Edit variable EXTLST2 Extract list 2 RTVOBJAUT Retrieve object authority RTVSYSVAL3 Retrieve system value 3 SNDCOMPMSG Send completion message SNDESCMSG Send escape message SNDJLGMSG Send job log message SNDSTSMSG Send status message Implementation -------------- None, the tool is ready to use. Objects used by the tool ------------------------ Object Type Attribute Src member Src file ------ ---- --------- ---------- ---------- CHGLIBOBJA CMD TAASEFO QATTCMD TAASEFOC PGM CLP TAASEFOC QATTCL TAASEFOR PGM RPG TAASEFOR QATTRPG

CHGLIBOBJA      CHANGE LIBRARY OBJECT AUTHORITIES      TAASEFO


The  Change  Library  Object Authorities  command  changes  the  owner,
authorization list,  and individual authorities of one  or more objects
in  a library based on the output of  the CVTLIBOBJA command.  This may
be  used to  help  keep  the  authority information  the  same  between
libraries on different systems.

You must have *ALLOBJ authority to use CHGLIBOBJA.

Assume you have  two systems where a library must be  the same in terms
of objects and authorities.  On the primary system, you would enter:

            CVTLIBOBJA    LIB(xxx) OUTLIB(yyy)

This  would  create the  LIBOBJAUTP  file in  the named  library.   One
record would  be written for  each user  authorized to  each object  in
the library.  You then transfer the file to the second system.

On the second system, you would enter:

            CHGLIBOBJA    LIB(xxx) OBJAUTPLIB(yyy)

The CHGLIBOBJA command  takes the information from  the LIBOBJAUTP file
and  attempts  to   change  the  corresponding  objects  in  the  named
library:

  **   If the owner differs, the owner is changed.

  **   If the  authorization list  differs, the  authorization list  is
       changed.

  **   All authorities to the corresponding object are revoked.

  **   All authorities from the LIBOBJAUTP file are added.

  **   If  the user  is *GROUP,  the  group name  is  authorized if  it
       exists.

  **   A listing is created with the actions taken.

  **   Errors are  posted such as the object does  not exist, the owner
       or  authorization list does not exist,  the user does not exist,
       etc.

Options
-------

The simplest  solution  is  to use  CHGLIBOBJA  on an  entire  library.
Various options may be used:

  **   CVTLIBOBJA may be  used to convert one or  more libraries to the
       same LIBOBJAUTP outfile.

  **   CHGLIBOBJA  requires a single  library to be named  for each use
       of the  command.   Only  those records  in the  LIBOBJAUTP  file
       that match the library name will be processed.

  **   The default is  for all objects in the library  to be processed.
       A generic or specific object name may be processed.

  **   The  default  is for  all  object  types in  the  library  to be
       processed.  A list  of up to 40  object types may be  processed.

Processing considerations
-------------------------

The CVTLIBOBJA command  creates the LIBOBJAUTP outfile with  fields for
both OBOBJA  (normally contains *USE,  *CHANGE ...) and  the individual
X's  for  authority  in  fields  such  as  OAOPR,  OAOMGT  etc.    When
CHGLIBOBJA runs, it  uses only  the individual fields  for the Xs  (the
Xs  are changed  to *OBJOPR,  *OBJMGT ...)  and not  the  OBOBJA field.
When  you display  the object with  DSPOBJAUT, the  system displays the
proper value for what would be OBOBJA.

Consequently, if  you are  changing the  LIBOBJAUTP  file before  using
CHGLIBOBJA, you  must change the individual  fields and not  the OBOBJA
field.

*ALLOBJ special authority users
-------------------------------

An  *ALLOBJ authority user  may be specified  as having less  than *ALL
authority to  an object  (such as  *USE or  *EXCLUDE).   This does  not
prevent the user from performing any function on the object.

The listing  will describe the  authority as  described by the  object,
but does not consider *ALLOBJ users.

CHGLIBOBJA escape messages you can monitor for
----------------------------------------------

None.  Escape messages from based on functions will be re-sent.

Command parameters                                    *CMD
------------------

   LIB           The library containing the objects to be changed.

   OBJAUTPLIB    The  library containing the  LIBOBJAUTP file  with the
                 records  created by the CVTLIBOBJA  command.  *LIBL is
                 the default.  *CURLIB may be entered.

                 The  LIBOBJAUTP   file   may  contain   records   from
                 multiple  libraries, but  only  the  library named  in
                 the LIB parameter will be processed.

   MBR           The  member of  the OBJAUTPLIB file  to be  used.  The
                 default is *FIRST.

   OBJ           The object name  or generic name to  be changed.   The
                 default is *ALL.

   OBJTYPE       A list of  up to 40 object  types to be changed.   The
                 default  is *ALL.  For  a complete list  of the object
                 types that may be  changed, use the command  prompter.

Restrictions
------------

You must have *ALLOBJ special authority to use CHGLIBOBJA.

Prerequisites
-------------

The following TAA Tools must be on your system:

     CHKOBJ3         Check object 3
     EDTVAR          Edit variable
     EXTLST2         Extract list 2
     RTVOBJAUT       Retrieve object authority
     RTVSYSVAL3      Retrieve system value 3
     SNDCOMPMSG      Send completion message
     SNDESCMSG       Send escape message
     SNDJLGMSG       Send job log message
     SNDSTSMSG       Send status message

Implementation
--------------

None, the tool is ready to use.

Objects used by the tool
------------------------

   Object        Type    Attribute      Src member    Src file
   ------        ----    ---------      ----------    ----------

   CHGLIBOBJA    *CMD                   TAASEFO       QATTCMD
   TAASEFOC      *PGM       CLP         TAASEFOC      QATTCL
   TAASEFOR      *PGM       RPG         TAASEFOR      QATTRPG

Added to TAA Productivity tools March 15, 2003

Home Page

Up to Top