The Grant Owned Objects command allows a user to to be granted
authorizations to all objects owned by a different user.
A typical command would be entered as:
GRTOWNOBJ OWNUSER(USER1) GRTUSER(USER2)
AUT(*USE)
This would grant *USE authority to USER2 for every object owned by
USER1.
A companion command RVKOWNOBJ also exists.
You must be either the owning user or a user with *ALLOBJ authority
to use either command.
A spooled file lists each object that has been 'granted to' or
'revoked from'. If any errors occur, an escape message is sent (plus
individual diagnostic messages) and the spooled file identifies the
problem.
Note that it is not considered an error to grant authority that the
user already has or to revoke authority that the user does not have.
GRTOWNOBJ Command parameters *CMD
----------------------------
OWNUSER The user who owns the objects.
GRTUSER The user to be granted authority to.
OBJTYPE The object type to be considered. The default is
*ALL. Specifying an object type, allows a subset of
the owned objects to have authority granted to.
AUT The authority to be granted. One of the special
values (*USE, *CHANGE, *ALL, or *EXCLUDE) may be
specified by itself. The individual authorities of
*OBJOPR, *OBJMGT, *OBJEXIST, *READ, *ADD, *UPD, or
*DLT may be specified in any combination. The
default is *CHANGE.
RVKOWNOBJ Command parameters *CMD
----------------------------
OWNUSER The user who owns the objects.
RVKUSER The user to have authority revoked from.
OBJTYPE The object type to be considered. The default is
*ALL. Specifying an object type, allows a subset of
the owned objects to have authority revoked from.
AUT The authority to be revoked. One of the special
values (*USE, *CHANGE, *ALL, or *EXCLUDE) may be
specified by itself. The individual authorities of
*OBJOPR, *OBJMGT, *OBJEXIST, *READ, *ADD, *UPD, or
*DLT may be specified in any combination. The
default is *CHANGE.
Restrictions
------------
You must be either the owning user or a user with *ALLOBJ special
authority to use GRT/RVKOWNOBJ.
Prerequisites
-------------
The following TAA Tools must be on your system:
EDTVAR Edit variable
EXTLST Extract list
SNDCOMPMSG Send completion message
SNDESCMSG Send escape message
SNDSTSMSG Send status message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
GRTOWNOBJ *CMD TAASECQ QATTCMD
RVKOWNOBJ *CMD TAASECQ2 QATTCMD
TAASECQC *PGM CLP TAASECQC QATTCL
TAASECQC2 *PGM CLP TAASECQC2 QATTCL
TAASECQR *PGM RPG TAASECQR QATTRPG
Note that the same RPG program is used by both CL programs.
Structure
---------
GRTOWNOBJ
TAASECQC CL Pgm
TAASECQR RPG Pgm
RVKOWNOBJ
TAASECQC2 CL Pgm
TAASECQR RPG Pgm
|