The Revoke Duplicate IFS Authority command checks or revokes
duplicate authorities to the *PUBLIC user of IFS objects. You must
first run CVTIFSAUT to create an outfile of authorizations. If the
authorization for a user is the same as the *PUBLIC profile, it is
considered a duplicate (except for the owner). If the *PUBLIC user
is specified as *AUTL, the authorizations from the *AUTL are used.
Duplicates because of Group Profiles are not considered. The default
is to 'check' (a listing if produced).
*ALLOBJ special authority is required.
A typical series of commands would be:
CVTIFSAUT OBJ('/xxx') OUTLIB(QTEMP)
RVKDUPIFSA LIB(yyy)
Because the default for the OPTION parameter is *CHECK, only a
listing would be produced. After reviewing the listing, you could
remove the duplicates with:
RVKDUPIFSA OPTION(*REVOKE) LIB(QTEMP)
If you want to follow OPTION(*REVOKE) with another RVKDUPIFSA
command, you must first run CVTIFSAUT again to get the outfile of
current authorities.
RVKDUPIFSA escape messages you can monitor for
----------------------------------------------
TAA9891 The IFSAUTP file does not exist.
Escape messages from based on functions will be re-sent.
RVKDUPIFSA Command parameters *CMD
-----------------------------
OPTION The option to be used. The default is *CHECK
meaning that no authorizations are changed and a
listing is output.
*REVOKE may be specified to revoke the duplicate
authorizations. Only the duplicate authorizations
to the object are revoked.
Only duplicate authorizations for a specific user
(other than the owner) are compared to the *PUBLIC
user. If the *PUBLIC user is specified as *AUTL,
the authorizations from the *AUTL are used. Not
considered are duplicates for group profiles.
PRTPUBLIC An option for whether the *PUBLIC user of each
object will always be listed. The default is *ALL
to list the *PUBLIC user. This provides at least
one line per object.
*DUP may be specified to list the *PUBLIC user for
only those objects which have duplicates.
PRTDETAIL An option for whether to list just the duplicate
user authorizations or all authorized users. The
default is *DUP to print a single line for an
authorized user if duplicate authorities exist.
*ALL may be specified to print all users who are
authorized.
LIB The library where the IFSAUTP file exists. The file
must have been created by the CVTIFSAUT command.
*LIBL is the default. A specific library or *CURLIB
may be specified.
MBR The member of the IFSAUTP file to be used. The
default is IFSAUTP. A specific member may be named
if it was output by the CVTIFSAUT command.
OUTPUT How to output the results. * is the default to
display the spooled file if the command is entered
interactively. The spooled file is deleted after it
is displayed.
If the command is entered in batch or *PRINT is
specified, the spooled file is output and retained.
Restrictions
------------
** *ALLOBJ special authority is required.
** Group profiles are not considered.
** The maximum path length processed is 5000 bytes.
Prerequisites
-------------
The following TAA Tools must be on your system:
CHKALLOBJ Check *ALLOBJ special authority
RTVSYSVAL3 Retrieve system value 3
SNDCOMPMSG Send completion message
SNDESCINF Send escape information
SNDESCMSG Send escape message
Implementation
--------------
None, the tool is ready to use.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
RVKDUPIFSA *CMD TAAIFTO QATTCMD
TAAIFTOC *PGM CLP TAAIFTOC QATTCL
TAAIFTOC2 *PGM CLP TAAIFTOC2 QATTCL
TAAIFTOR *PGM RPG TAAIFTOR QATTRPG
|
