TAA Tools

The Check  TAA Authorization Lists  command checks  to ensure that  all
TAA  Authorization Lists  are set  to *PUBLIC  *EXCLUDE.   This  is the
recommended  setting.   Allowing *PUBLIC  access to  many TAA functions
such as  CPYUSRPRF2 would be  considered a  security violation in  most
installations.  An option exists to change to *PUBLIC(*EXCLUDE).

The command would be entered by an *ALLOBJ special authority user as:


A listing is output with the results.

If  exceptions  are reported,  you  can  change  the TAA  Authorization
Lists to PUBLIC(*EXCLUDE) by specifying:


A  successful completion  will cause  all TAA authorization  lists that
are not PUBLIC(*EXCLUDE) to be set to *EXCLUDE.

An  option  exists  to   list  the  objects   that  are  tied  to   the
Authorization Lists and their last usage information.

CHKTAAAUTL escape messages you can monitor for

None.  Escape messages from based on functions will be re-sent.


If any  exceptions are found,  the CHKTAAAUTL  data area will  exist in
QTEMP.   This allows a  CL program to perform  CHKTAAAUTL and check the
results with CHKOBJ.

Command parameters                                    *CMD

   OPTION        The option  parameter defaults  to *CHECK  to  provide
                 only  a  check  of  the   existing  TAA  Authorization

                 *EXCLUDE   may   be   specified   to   set   all   TAA
                 Authorization Lists to PUBLIC(*EXCLUDE).

   OBJUSE        A  *YES/*NO  option for  whether  to list  the objects
                 that are  tied to  the  Authorization Lists.   *NO  is
                 the default to not list the objects.

                 *YES  may  be  specified  if OPTION(*CHECK)  is  used.
                 One  line for  each  object that  is authorized  to an
                 Authorization List  is  printed with  the  last  usage




The following TAA Tools must be on your system:

     CHKALLOBJ       Check *ALLOBJ special authority
     CVTDAT          Convert date
     RTVOBJD2        Retrieve object description 2
     RTVSYSVAL3      Retrieve system value 3
     SNDCOMPMSG      Send completion message
     SNDSTSMSG       Send status message


None, the tool is ready to use.

Objects used by the tool

   Object        Type    Attribute      Src member    Src file
   ------        ----    ---------      ----------    ----------

   CHKTAAAUTL    *CMD                   TAATOMF       QATTCMD
   TAATOMFC      *PGM       CLP         TAATOMFC      QATTCL
   TAATOMFC2     *PGM       CLP         TAATOMFC2     QATTCL
   TAATOMFC3     *PGM       CLP         TAATOMFC3     QATTCL
   TAATOMFR      *PGM       RPG         TAATOMFR      QATTRPG
   TAATOMFR2     *PGM       RPG         TAATOMFR2     QATTRPG

If OBJUSE(*YES)  is specified  the TAATOMFR2 program  is used  with the
sub program TAATOMFC3.

Added to TAA Productivity tools August 15, 2001

Home Page Up to Top