Display Authority (DSPAUT)

Where allowed to run: All environments (*ALL)
Threadsafe: No

The Display Authority (DSPAUT) command shows the list of authorized users of an object and their authorities for the object. If the object is secured by an authorization list, the name of the authorization list is also shown.

The following are shown for the specified object:

The object path name.
The name of the object's owner.
The name of the object's primary group.
The name of the authorization list securing the object.
A list of all the users who are authorized to use the object.
The authorities that each user has for the object.

If an object does not have an owner name associated with it, no authorities for the object are shown.

See Appendix D of the System i Security Reference, SC41-5302 for the authorities needed to use this command.

For more information about integrated file system commands, see the Integrated file system topic collection in the IBM i Information Center at http://www.ibm.com/systems/i/infocenter/.

Top

Parameters

Keyword	Description	Choices	Notes
OBJ	Object	Path name	Required, Positional 1
SYMLNK	Symbolic link	NO, YES	Optional
OUTPUT	Output	, PRINT	Optional

Top

Object (OBJ)

Specifies the objects for which the authorized users and their authorities are displayed.

For more information on specifying path names, refer to "Object naming rules" in the CL topic collection in the Programming category in the IBM i Information Center at http://www.ibm.com/systems/i/infocenter/.

This is a required parameter.

path-name: Specify the path name of the objects for which specific authorities are to be shown.
The object path name can be either a simple name or a name that is qualified with the name of the directory in which the object is located. A pattern can be specified in the last part of the path name. An asterisk (*) matches any number of characters and a question mark (?) matches a single character. If the path name is qualified or contains a pattern, it must be enclosed in apostrophes.

Top

Symbolic link (SYMLNK)

If the last component in the path name is a symbolic link, specifies whether or not to display the symbolic link or the object pointed to by the symbolic link.

*NO: The symbolic link object is not displayed. The object pointed to by the symbolic link is displayed.
*YES: If the object is a symbolic link, the symbolic link is displayed. The object pointed to by the symbolic link is not displayed.

Top

Output (OUTPUT)

Specifies whether the output from the command is displayed at the requesting work station or printed with the job's spooled output.

*: The output is displayed (if requested by an interactive job) or printed with the job's spooled output (if requested by a batch job).

*PRINT: The output is printed with the job's spooled output.

Top

Examples

Example 1: Displaying Users and Authorities

DSPAUT   OBJ('/QSYS.LIB/ARLIB.LIB/PROG1.PGM')

This command shows the authorized users and their authorities for the object named PROG1 to the user who entered the command, if that user has object management authority for the object. PROG1 is a program located in the library named ARLIB. The system assumes * for the device that shows the output list. If the command was entered in the batch subsystem, the output is placed in the default output queue for the job. If the command was entered in the interactive subsystem, the output is shown on the device where the user entered the command.

Example 2: Printing List of Users

DSPAUT   OBJ('/MYDIR/MYOBJECT')  OUTPUT(*PRINT)

This command causes the list of authorized users of MYOBJECT in the MYDIR directory to be printed.

Top

Error messages

*ESCAPE Messages

CPDA080: User profile name too long.
CPE3101: A non-recoverable I/O error occurred.
CPE3408: The address used for an argument was not correct.
CPE3418: Possible APAR condition or hardware failure.
CPE3474: Unknown system state.
CPFA0AA: Error occurred while attempting to obtain space.
CPFA0AB: Operation failed for object. Object is &1.
CPFA0AD: Function not supported by file system.
CPFA0A1: An input or output error occurred.
CPFA0A2: Information passed to this operation was not valid.
CPFA0A3: Path name resolution causes looping.
CPFA0A4: Too many open files for process.
CPFA0A5: Too many open files.
CPFA0A7: Path name too long.
CPFA0A9: Object not found. Object is &1.
CPFA0B1: Requested operation not allowed. Access problem.
CPFA0C0: Buffer overflow occurred.
CPFA0C1: CCSID &1 not valid.
CPFA08B: Path name cannot begin with *.
CPFA08C: Pattern not allowed in path name directory.
CPFA08E: More than one name matches pattern.
CPFA085: Home directory not found for user &1.
CPFA086: Matching quote not found in path name.
CPFA087: Path name contains null character.
CPFA088: Path name pattern not valid.
CPFA09C: Not authorized to object. Object is &1.
CPFA09D: Error occurred in program &1.
CPFA09E: Object in use. Object is &1.
CPFA09F: Object damaged. Object is &1.
CPFA091: Pattern not allowed in user name.
CPFA092: Path name not converted.
CPFA093: Name matching pattern not found.
CPFA094: Path name not specified.
CPF1F05: Directory handle not valid.
CPF1F41: Severe error occurred while addressing parameter list.
CPF1F4A: Value for number of directory entries not valid.
CPF1F53: Value for length of data buffer not valid.
CPF2203: User profile &1 not correct.
CPF22F0: Unexpected errors occurred during processing.
CPF2225: Not able to allocate internal system object.
CPF9801: Object &2 in library &3 not found.
CPF9802: Not authorized to object &2 in &3.
CPF9803: Cannot allocate object &2 in library &3.

Top