The Rename IFS Authorities command allows you to change the
authorities from one user to another for IFS objects. The default is
for ACTION(*CHECK) which will not cause any changes, but a listing is
produced describing the changes that would occur. Two exceptions
exist that will prevent a change 1) if the user is the owner of an
object, or 2) if the user is the Primary Group Profile of the object.
You must have *ALLOBJ authority to use RNMIFSAUT.
If the To user has any existing authorities to the object, they would
be lost. Only the authorities that the From User had would exist for
the To user on the completion of the command.
In some cases, RNMIFSAUT will be a long running command.
A typical command would be:
RNMIFSAUT FROMUSRPRF(aaa) TOUSRPRF(bbb)
A listing would be produced of all the individual authorities for
user aaa. Because ACTION(*CHECK) was specified, no changes would
occur. If any proposed changes could not occur (such as the user is
the owner of an object), the object would be flagged.
If ACTION(*CHANGE) had been specified, the authorities for each
object would be added for the To User Profile and the From User
Profile would be removed.
RNMIFSAUT escape messages you can monitor for
---------------------------------------------
TAA9891 No authorities exist for the user.
Escape messages from based on functions will be re-sent.
RNMIFSAUT Command parameters *CMD
----------------------------
FROMUSRPRF The User Profile of the From user. After adding the
authorities of the From user to the To user, the
From user profile is removed from the object.
TOUSRPRF The User Profile of the To user. The user will
receive all authorities of the From user unless 1)
the From user is the owner of the object or 2) the
From user is the Primary Group Profile of the
object.
If the From user had authorities to the object, they
would be replaced so that only the authorities from
the From user would exist for the To user.
ACTION The action to be performed.
*CHECK is the default meaning no changes would
occur. A listing is produced describing the changes
that would occur and any errors that would prevent a
change.
*CHANGE may be specified to add the existing
authorities for the From User to the To User and the
From User would be removed. If the To user had any
existing authorities, they would be lost.
OUTPUT How to output the results. * is the default to
display the spooled file if the command is entered
interactively. The spooled file is deleted after it
is displayed.
If the command is entered in batch or *PRINT is
specified, the spooled file is output and retained.
Restrictions
------------
You must have *ALLOBJ authority to use RNMIFSAUT.
Two exceptions exist that will prevent a change 1) if the user is the
owner of an object, or 2) if the user is the Primary Group Profile of
the object.
If the To user has any existing authorities to the object, they would
be lost. Only the authorities that the From User had would exist for
the To user on the completion of the command.
Prerequisites
-------------
The following TAA Tools must be on your system:
CHKALLOBJ Check *ALLOBJ special authority
CVTIFSAUT2 Convert IFS authority 2
RTVSYSVAL3 Retrieve system value 3
SNDCOMPMSG Send completion message
SNDESCINF Send escape information
SNDESCMSG Send escape message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
RNMIFSAUT *CMD TAAIFTY QATTCMD
TAAIFTYC *PGM CLP TAAIFTYC QATTCL
TAAIFTYC2 *PGM CLP TAAIFTYC2 QATTCL
TAAIFTYR *PGM RPG TAAIFTYR QATTRPG
|
