CHKUSRAUT CHECK USER AUTHORITY TAASECA |
Note that CHKUSRAUT has been primarily replaced by the RTVOBJAUT TAA
Tool. RTVOBJAUT uses APIs to access the information more quickly and
provides more information. CHKUSRAUT remains for compatibility
reasons.
In some environments it is desirable to operate under an adopted
profile and yet still have a need to check individual authority. The
CHKUSRAUT command will allow you to check an object's authority
independent of the program adopt function.
The user group authority is always included in the check.
Assume you have adopted authority at a high level menu and that a
single profile owns all of the production objects. If a secure
function now needs to be executed, the CHKOBJ command cannot be used
because the single profile owns the object to be checked.
The typical use of the CHKUSRAUT command is:
CHKUSRAUT OBJECT(LIBY/FILEX) OBJTYPE(*FILE) AUT(*UPD)
The command operates like CHKOBJ in that it will not return a
completion message if the user is authorized. An escape message
(CPF9898) will be sent if the user is not authorized.
A second command CHKUSRAUTL is available to check if a user is
authorized to an authorization list.
CHKUSRAUT command parameters *CMD
---------------------------
OBJECT The qualified object name to be checked. The
library qualifier defaults to *LIBL.
OBJTYPE The object type to be checked.
AUT A list of authorities to be checked. The checking
is done at an individual authority level. You must
specify one or more of the following: *OBJEXIST,
*OBJMGT, *OBJOPR, *READ, *UPD, *ADD or *DLT.
CHKAUTL Whether the authorization list for the object (if
any) should be checked also. The default is *YES.
If no authorization list exists for the object, the
checking is ignored.
CHKUSRAUTL command parameters *CMD
-----------------------------
AUTL The authorization list to be checked.
AUT A list of authorities to be checked. The checking
is done at an individual authority level. You must
specify one or more of the following: *OBJEXIST,
*OBJMGT, *OBJOPR, *READ, *UPD, *ADD or *DLT.
PUBLIC A *YES/*NO value for whether the *PUBLIC user should
be excluded from the check. *YES is the default.
*NO will exclude the *PUBLIC user.
Prerequisites
-------------
The following TAA Tools must be on your system:
EXTLST Extract list
SNDESCMSG Send escape message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ----- --------- ---------- -----------
CHKUSRAUT *CMD TAASECA QATTCMD
CHKUSRAUTL *CMD TAASECA2 QATTCMD
TAASECAC *PGM CLP TAASECAC QATTCL
TAASECAC2 *PGM CLP TAASECAC2 QATTCL
|
Added to TAA Productivity tools April 1, 1995