The Rename Primary Group Profile command uses the CHGPGP command to
rename the Primary Group Profile of the IFS objects for a user. The
To user must be a 'group profile' and becomes the new Primary Group
Profile. The default is *CHECK meaning no changes would occur and a
listing of the objects that would be changed is output. *CHANGE may
be specified to change the Primary Group Profile attribute.
You must have *ALLOBJ special authority to use RNMIFSPGP.
A typical command would be:
RNMIFSPGP FROMUSRPRF(USER1) TOUSRPRF(USER2)
ACTION(*CHECK)
A listing would be output of all IFS objects where USER1 is the
Primary Group Profile.
If ACTION(*CHANGE) had been specified, the To user profile would
become the Primary Group Profile.
The values for DTAAUT, OBJAUT, and RVKOLDAUT are passed thru to each
CHGPGP command that is executed.
** DTAAUT defaults to *OLDPGP, causing the To user to have the
same data rights as the From user.
** OBJAUT defaults to *NONE, causing the To user to not have any
of the object rights of *OBJMGT, *OBJEXIST, *OBJALTER, and
*OBJREF.
** RVKOLDAUT defaults to *YES causing any rights the From user
has to the object to be revoked (the From user will not have
any explicit authorizations).
The system GHGPGP command submits a batch job QHXHDLTU to the
QSYSNOMAX job queue that performs the change.
RNMIFSPGP escape messages you can monitor for
---------------------------------------------
TAA9891 The From new user does not have any PGP objects
Escape messages from based on functions will be re-sent.
RNMIFSPGP Command parameters *CMD
----------------------------
FROMUSRPRF The name of the user profile that is to be changed
for the Primary Group Profile attribute of IFS
objects.
TOUSRPRF The name of the user profile that will be the new
Primary Group Profile attribute of IFS objects. The
user must be a 'group profile'.
DTAAUT The data authorities for the To user to the objects.
This value is passed thru to each CHGPGP command
run. The default is *OLDPGP (same as the From
user). *PRIVATE (the current authorities of the To
user), *RWX, *RW, *RX, *WX, *R, *W, *X, and *EXCLUDE
may also be specified.
For a full discussion of the parameter, see the
CHGPGP command help text.
OBJAUT The object authorities for the To user to the
objects. This value is passed thru to each CHGPGP
command run. The default is *NONE (none of the
allowed object authorities). *ALL (all of the
allowed object authorities) or one or more of the
specific object authorities *OBJMGT, *OBJEXIST,
*OBJALTER, and *OBJREF may also be specified.
For a full discussion of the parameter, see the
CHGPGP command help text.
RVKOLDAUT Whether the authorities of the From user are to be
revoked after the Primary Group Profile is changed.
*YES is the default to revoke the authorities.
*NO may be specified to retain the authorities.
For a full discussion of the parameter, see the
CHGPGP command help text.
ACTION The action to be performed.
*CHECK is the default which produces a listing of
the objects where the From user is the Primary Group
Profile. No changes occur.
*CHANGE may be specified to change the Primary Group
profile attribute.
OUTPUT How to output the results. * is the default to
display the spooled file if the command is entered
interactively. The spooled file is deleted after it
is displayed.
If the command is entered in batch or *PRINT is
specified, the spooled file is output and retained.
Restrictions
------------
None.
Prerequisites
-------------
The following TAA Tools must be on your system:
CHKALLOBJ Check *ALLOBJ special authority
CVTIFSAUT2 Convert IFS authority 2
EXTLST2 Extract list 2
RTVSYSVAL3 Retrieve system value 3
SNDCOMPMSG Send completion message
SNDESCINF Send escape information
SNDESCMSG Send escape message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
RNMIFSPGP *CMD TAAIFUA QATTCMD
TAAIFUAC *PGM CLP TAAIFUAC QATTCL
TAAIFUAC2 *PGM CLP TAAIFUAC2 QATTCL
TAAIFUAR *PGM RPG TAAIFUAR QATTRPG
|
