Case 10: Using multiple groups

This is an example of using multiple groups.

WOODBC needs *CHANGE authority to the CRLIM file. WOODBC is a member of three groups: DPTAR, DPTSM, and DPTMG. DPTAR is the first group profile (GRPPRF). DPTSM and DPTMG are supplemental group profiles (SUPGRPPRF). Figure 1 shows the authorities for the CRLIM file:

Figure 1. Authority for the CRLIM file

                           
                           Display Object Authority
 
Object . . . . . . . :   CRLIM           Owner  . . . . . . . :   OWNAR
  Library  . . . . . :   CUSTLIB         Primary group  . . . :   DPTAR
Object type    . . . :   *FILE           ASP device . . . . . :   *SYSBAS

 Object secured by authorization list  . . . . . . . . . . . . :   *NONE
 
                        Object
User        Group       Authority
OWNAR                   *ALL
DPTAR                   *CHANGE
DPTSM                   *USE
*PUBLIC                 *EXCLUDE

These are the authority checking steps:

Flowchart 1, step 1.
1. Flowchart 2, step 1. Return to calling flowchart with insufficient authority.
Flowchart 1, step 2.
1. Flowchart 3, steps 1 and 2. Object to check = CUSTLIB/CRLIM *FILE.
2. Flowchart 3, step 3.
  1. Flowchart 4, step 1. WOODBC does not own the CRLIM file. Return to Flowchart 3 with no authority found.
3. Flowchart 3, step 4.
  1. Flowchart 5, steps 1, 2 and 3. Public authority is not sufficient.
4. Flowchart 3, step 5.
5. Flowchart 3, step 6. WOODBC does not have any authority to the CRLIM file.
6. Flowchart 3, steps 7 and 8. The CRLIM file is not secured by an authorization list. Return to Flowchart 1 with no authority found.
Flowchart 1, steps 3 and 4. The first group for WOODBC is DPTAR.
1. Flowchart 6, steps 1 and 2. Object to check = CUSTLIB/CRLIM *FILE.
2. Flowchart 6, step 3.
  1. Flowchart 4, step 1. DPTAR does not own the CRLIM file. Return to Flowchart 6 with no authority found.
3. Flowchart 6, steps 4 and 5. Authorized. DPTAR is the primary group and has sufficient authority.