The Change Public Authority Command changes the authorization of the
*PUBLIC to one or more objects in the library and the library object.
This allows a simple means of standardizing how all objects, generic
objects, or object types are authorized to the public. The command
defaults to bypass those objects which are *PUBLIC *EXCLUDE or
*PUBLIC *AUTL.
A typical command would be:
CHGPUBAUT LIB(xxx) OBJ(*ALL) OBJTYPE(*PGM) AUT(*USE)
This would change all of the *PUBLIC authorizations of programs to
*USE authority within the designated library. A spooled file is
created describing the objects that were changed and any error
conditions.
By default, if the object is *PUBLIC *EXCLUDE, no change occurs.
By default, if the object is authorized to an authorization list and
the *PUBLIC is specified as *AUTL for the object, no change occurs.
The technique used is to determine the objects to be authorized and
the public is then specified as *EXCLUDE. This removes any existing
authorization. The authorization specified on the command is then
granted to *PUBLIC.
If an authorization list object is specified, the CHGAUTLE command is
used to set the *PUBLIC authority directly.
The library object will also be changed if an object type of *ALL or
*LIB is specified.
You must have the proper authority to change the authority to the
objects specified. If not, the command completes what it can and
sends diagnostic messages for error conditions followed by an ending
escape message. The spooled output will also indicate what could not
be changed.
Command parameters *CMD
------------------
LIB The library containing the objects to be considered.
Both the library object and the objects within the
library are considered.
OBJ The objects to be authorized. The default is *ALL.
An object name or a generic name may be specified.
OBJTYPE The object types to be authorized. The default is
*ALL. Any object valid on GRTOBJAUT may be
specified.
AUT The authorization to be used for the *PUBLIC
profile. The default is *USE. The other single
values that may be specified are *CHANGE, *EXCLUDE,
*ALL, and *AUTL.
A list of individual authorities may be specified.
The individual authorities are *OBJALTER, *OBJEXIST,
*OBJMGT, *OBJOPR, *OBJREF, *ADD, *DELETE, *EXECUTE,
and *UPD.
BYPEXCLUDE If the *PUBLIC is *EXCLUDE, should the object be
bypassed. The default is *YES meaning that no
changes occur to any objects that are specified as
*PUBLIC *EXCLUDE.
*NO may be specified to set the *PUBLIC user to the
value of the AUT parameter if the object is *PUBLIC
*EXCLUDE.
BYPPUBAUTL Determines if the objects that are authorized to an
authorization list and the *PUBLIC is specified
*AUTL (authorization comes from the authorization
list) are to be bypassed. The default is *YES which
bypasses the object (authority is not changed). If
*NO is specified, the *PUBLIC user is changed from
*AUTL to the value of the AUT parameter.
PRINT A *YES/*NO parameter that determines whether a
summary spooled file will be created. The default
is *YES to create the spooled file.
*NO may be specified to bypass the spooled file.
Restrictions
------------
You must have the proper authority to the objects to change the
public authority.
Prerequisites
-------------
The following TAA Tools must be on your system:
EDTVAR Edit variable
EXTLST Extract list
RTVPUBAUT Retrieve public authority
RTVSYSVAL3 Retrieve system value 3
SNDCOMPMSG Send completion message
SNDESCMSG Send escape message
SNDSTSMSG Send status message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
CHGPUBAUT *CMD TAASEDI QATTCMD
TAASEDIC *PGM CLP TAASEDIC QATTCL
TAASEDIR *PGM RPG TAASEDIR QATTRPG
|
