Authority for New Objects (QCRTAUT)

The Authority for New Objects (QCRTAUT) system value specifies the public authority for a newly created object.

The QCRTAUT system value is used to determine the public authority for a newly created object if the following conditions are met:
  • The create authority (CRTAUT) for the library of the new object is set to *SYSVAL.
  • The new object is created with public authority (AUT) of *LIBCRTAUT.
Note: This system value is a restricted value. See Security system values for details on how to restrict changes to security system values and a complete list of the restricted system values.
Table 1. Possible values for the QCRTAUT system value:
Value Description
*CHANGE The public can change newly created objects.
*USE The public may view, but not change, newly created objects.
*ALL The public may perform any function on new objects.
*EXCLUDE The public is not allowed to use new objects.
Recommended value:

The QCRTAUT system value is not used for objects created in directories in the enhanced file system.

Attention: Several IBM-supplied libraries, including QSYS, have a CRTAUT value of *SYSVAL. If you change the QCRTAUT system value to something other than *CHANGE, you might encounter problems with signing on at new or automatically created devices. To avoid these problems when you change QCRTAUT to something other than *CHANGE, make sure that all device descriptions and their associated message queues have a PUBLIC authority of *CHANGE. One way to accomplish this is to change the CRTAUT value for library QSYS to *CHANGE from *SYSVAL.