File commands

This table lists the specific authorities required for the file commands.

Commands identified by (Q) are shipped with public authority *EXCLUDE. Commands shipped with public authority *EXCLUDE shows which IBM-supplied user profiles are authorized to the command. The security officer can grant *USE authority to others.

Command	Referenced object	Authority needed
Command	Referenced object	For object	For library
ADDICFDEVE	ICF file	OBJOPR, OBJMGT	*EXECUTE
ADDLFM	Logical file	OBJOPR, OBJMGT or *OBJALTER	EXECUTE, ADD
	File referenced in DTAMBRS parameter, when logical file is keyed	OBJOPR, OBJMGT or *OBJALTER	*EXECUTE
	File referenced in DTAMBRS parameter, when logical file is not keyed	*OBJOPR	*EXECUTE
ADDPFCST	Dependent file, if TYPE(*REFCST) is specified	OBJMGT or OBJALTER	*EXECUTE
	Parent file, if TYPE(*REFCST) is specified	OBJMGT or OBJREF	*EXECUTE
	File, if TYPE(UNQCST) or TYPE(PRIKEY) is specified	*OBJMGT	*EXECUTE
ADDPFM	Physical file	OBJOPR, OBJMGT or *OBJALTER	EXECUTE, ADD
ADDPFTRG	Physical file, to insert trigger	READ, OBJOPR, and OBJALTER or OBJMGT	*EXECUTE
	Physical file, to delete trigger	READ, OBJOPR, and OBJALTER or OBJMGT	*EXECUTE
	Physical file, to update trigger	READ, OBJOPR, and OBJALTER or OBJMGT	*EXECUTE
	Trigger program	*EXECUTE	*EXECUTE
CHGDDMF ^13,15	DDM file	OBJOPR, OBJMGT	EXECUTE, READ
CHGDDMF ^13,15	Device description ⁷	*CHANGE
CHGDKTF	Diskette file	OBJOPR, OBJMGT	*EXECUTE
CHGDKTF	Device if device name specified in the command	*OBJOPR	*EXECUTE
CHGDSPF	Display file	OBJOPR, OBJMGT	*EXECUTE
CHGDSPF	Device if device name specified	*OBJOPR	*EXECUTE
CHGDTA	Data file	OBJOPR, ADD, UPD, DLT	*EXECUTE
	Program	*USE	*EXECUTE
	Display file	*USE	*EXECUTE
CHGICFDEVE	ICF file	OBJOPR, OBJMGT	*EXECUTE
CHGICFF	ICF file	OBJOPR, OBJMGT	*EXECUTE
CHGLF	Logical file	OBJMGT or OBJALTER	*EXECUTE
CHGLFM	Logical file	OBJMGT or OBJALTER	*EXECUTE
CHGPF	Physical file	OBJMGT or OBJALTER	*EXECUTE
CHGPFCST	Dependent file	OBJMGT or OBJALTER	*EXECUTE
CHGPFM	Physical file	OBJMGT or OBJALTER	*EXECUTE
CHGPFTRG	Physical file	OBJMGT or OBJALTER	*EXECUTE
CHGPRTF	Printer output	OBJOPR, OBJMGT	*EXECUTE
CHGPRTF	Device if device name specified	*OBJOPR	*EXECUTE
CHGSAVF	Save file	OBJOPR, and (OBJMGT or *OBJALTER).	*EXECUTE
CHGSRCPF	Source physical file	OBJMGT or OBJALTER	*EXECUTE
CHGTAPF	Tape file	OBJOPR, OBJMGT	*EXECUTE
CHGTAPF	Device if device name specified	*OBJOPR	*EXECUTE
CLRPFM¹²	Physical file	OBJOPR, OBJMGT or OBJALTER, DLT	*EXECUTE
CLRSAVF	Save file	OBJOPR, OBJMGT	*EXECUTE
CPYF	From-file	OBJOPR, READ	*EXECUTE
	To-file (device file)	OBJOPR, READ	*EXECUTE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
	Based-on file if from-file is logical file	*READ	*EXECUTE
CPYFRMDKT	From-file	OBJOPR, READ	*EXECUTE
	To-file (device file)	OBJOPR, READ	*EXECUTE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
CPYFRMIMPF	From-file	OBJOPR, READ	*USE
	To-file (device file)	OBJOPR, READ	*USE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
	Based-on file if from-file is logical file	*READ	*USE
	command CRTDDMF	*USE	*USE
CPYFRMQRYF ¹	From-file	OBJOPR, READ	*EXECUTE
	To-file (device file)	OBJOPR, READ	*EXECUTE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
CPYFRMSTMF	Stream file	*R
	Directories in stream file path name prefix	*X
	Target database file, if MBROPT(*ADD) specified	*WX	*X
	Target database file, if MBROPT(REPLACE or NONE) specified	WX, OBJMGT	*X
	Target database file, if new member created	*WX	X, ADD
	Conversion table *TBL used to translate data	*R	*X
	Target save file exists	RWX, OBJMGT	*X
	Target save file is created		*RWX
CPYFRMTAP	From-file	OBJOPR, READ	*EXECUTE
	To-file (device file)	OBJOPR, READ	*EXECUTE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
CPYSRCF	From-file	OBJOPR, READ	*EXECUTE
	To-file (device file)	OBJOPR, READ	*EXECUTE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
CPYTODKT	To-file and from-file	OBJOPR, READ	*EXECUTE
	Device if device name specified on the command	OBJOPR, READ	*EXECUTE
	Based-on physical file if from-file is logical file	*READ	*EXECUTE
CPYTOIMPF	From-file	OBJOPR, READ	*USE
	To-file (device file)	OBJOPR, READ	*USE
	To-file (physical file)	Refer to the general rules.	Refer to the general rules.
	Based-on file if from-file is logical file	*READ	*USE
	command CRTDDMF	*USE	*USE
CPYTOSTMF	Database file or save file	*RX	*X
	Stream file, if it already exists	*W
	Stream file parent directory, if the stream file does not exist	*WX
	Stream file path name prefix	*X
	Database file and stream file, if AUT(FILE) or AUT(INDIRFILE) is specified	*OBJMGT
	Conversion table *TBL used to translate data	*R	*X
CPYTOTAP	To-file and from file	OBJOPR, READ	*EXECUTE
	Device if device name is specified	OBJOPR, READ	*EXECUTE
	Based-on physical file if from-file is logical file	*READ	*EXECUTE
CRTDDMF ¹³	DDM file: REPLACE(*NO)		READ, ADD, *EXECUTE
	DDM file: REPLACE(*YES)	Refer to the general rules.	READ, ADD
	Device description ⁷	*CHANGE
CRTDKTF	Device if device name is specified	*OBJOPR	*EXECUTE
	Diskette file: REPLACE(*NO)		READ, ADD, *EXECUTE
	Diskette file: REPLACE(*YES)	Refer to the general rules.	READ, ADD, *EXECUTE
CRTDSPF	Source file	*USE	*EXECUTE
	Device if device name is specified	*OBJOPR	*EXECUTE
	File specified in REF and REFFLD keywords	*OBJOPR	*EXECUTE
	Display file: REPLACE(*NO)		READ, ADD, *EXECUTE
	Display file: REPLACE(*YES)	Refer to the general rules.	READ, ADD, *EXECUTE
CRTICFF	Source file	*USE	*EXECUTE
	File specified in REF and REFFLD keywords	*OBJOPR	*EXECUTE
	ICF file: REPLACE(*NO)		READ, ADD
	ICF file: REPLACE(*YES)	Refer to the general rules.	READ, ADD
CRTLF	Source file	*USE	*EXECUTE
	File specified on PFILE or JFILE keyword, when logical file is keyed	OBJOPR, OBJMGT or *OBJALTER	*EXECUTE
	File specified on PFILE or JFILE keyword, when logical file is not keyed	*OBJOPR	*EXECUTE
	Files specified on FORMAT and REFACCPTH keywords	*OBJOPR	*EXECUTE
	Tables specified in the ALTSEQ keyword	*OBJOPR	*EXECUTE
	Logical file		EXECUTE, ADD
	File referenced in DTAMBRS parameter, when logical file is keyed	OBJOPR, OBJMGT or *OBJALTER	*EXECUTE
	File referenced in DTAMBRS parameter, when logical file is not keyed	*OBJOPR	*EXECUTE
CRTPF	Source file	*USE	*EXECUTE
	Files specified in FORMAT and REFFLD keywords and tables specified in the ALTSEQ keyword	*OBJOPR	*EXECUTE
	Physical file		EXECUTE, ADD
CRTPRTF	Source file	*USE	*EXECUTE
	Device if device name is specified	*OBJOPR	*EXECUTE
	Files specified in the REF and REFFLD keywords	*OBJOPR	*EXECUTE
	Printer output: Replace(*NO)		READ, ADD, *EXECUTE
	Printer output: Replace(*YES)	Refer to the general rules.	READ, ADD, *EXECUTE
CRTSAVF	Save file		READ, ADD, *EXECUTE
CRTSRCPF	Source physical file		READ, ADD, *EXECUTE
CRTS36DSPF	To-file source file when TOMBR is not *NONE	*ALL	*CHANGE
	Source file QS36SRC	*USE	*EXECUTE
	Display file: REPLACE(*NO)		READ, ADD
	Display file: REPLACE(*YES)	Refer to the general rules.	READ, ADD
	Create Display File (CRTDSPF) command	*OBJOPR	*EXECUTE
CRTTAPF	Tape file: REPLACE(*NO)		READ, ADD
	Tape file: REPLACE(*YES)	Refer to the general rules.	READ, ADD
	Device if device name is specified	*OBJOPR	*EXECUTE
DLTF ¹⁶	File	OBJOPR, OBJEXIST	*EXECUTE
DSPCPCST	Database file that has constraint pending	OBJOPR, READ	*EXECUTE
DSPDBR	Database file	*OBJOPR	*EXECUTE
DSPDBR	Output file, if specified	Refer to the general rules.	Refer to the general rules.
DSPDDMF ¹⁴	DDM file	*OBJOPR
DSPDTA	Data file	*USE	*EXECUTE
	Program	*USE	*EXECUTE
	Display file	*USE	*EXECUTE
DSPFD ²	File	*OBJOPR	*EXECUTE
	Output file	Refer to the general rules.	Refer to the general rules.
	File is a physical file and TYPE(ALL, MBR, OR *MBRLST) is specified	A data authority other than *EXECUTE	*EXECUTE
DSPFFD	File	*OBJOPR	*EXECUTE
DSPFFD	Output file	Refer to the general rules.	Refer to the general rules.
DSPPFM	Physical file	*USE	*EXECUTE
DSPSAVF	Save file	*USE	*EXECUTE
EDTCPCST	Data area, as specified on NFYOBJ keyword for the associated STRCMTCTL command.	*CHANGE	*EXECUTE
EDTCPCST	Files, as specified on NFYOBJ keyword for the associated STRCMTCTL command.	OBJOPR, ADD	*EXECUTE
GENCAT	Database file	OBJOPR and a data authority other than EXECUTE	*EXECUTE
INZPFM	Physical file, when RECORD(*DFT) is specified	OBJOPR, OBJMGT or OBJALTER, ADD	*EXECUTE
INZPFM	Physical file, when RECORD(*DLT) is specified	OBJOPR, OBJMGT or OBJALTER, ADD, *DLT	*EXECUTE
MRGSRC	Target file	CHANGE, OBJMGT	*CHANGE
	Maintenance file	*USE	*EXECUTE
	Root file	*USE	*EXECUTE
OPNDBF	Database file	OBJOPR and a data authority other than EXECUTE	*EXECUTE
OPNQRYF	Database file	OBJOPR and a data authority other than EXECUTE	*EXECUTE
PRTTRGPGM ¹¹
RGZPFM	File containing member	OBJOPR, OBJMGT or OBJALTER, READ, ADD, UPD, DLT, EXECUTE	*EXECUTE
RMVICFDEVE	ICF file	OBJOPR, OBJMGT	*EXECUTE
RMVM	File containing member	OBJEXIST, OBJOPR	*EXECUTE
RMVPFCST	File	OBJMGT or OBJALTER	*EXECUTE
RMVPFTRG	Physical file	OBJALTER, OBJMGT	*EXECUTE
RNMM	File containing member	OBJOPR, OBJMGT	EXECUTE, UPD
RSTS36F ⁴ (Q)	To-file	*ALL	Refer to the general rules.
	From-file	*USE	*EXECUTE
	Based on physical file, if file being restored is a logical (alternative) file	*CHANGE	*EXECUTE
	Device description for diskette or tape	*USE	*EXECUTE
RTVMBRD	File	*USE	*EXECUTE
SAVSAVFDTA	Tape, diskette, or optical device description	*USE	*EXECUTE
	Save file	*USE	*EXECUTE
	Optical Save/Restore File⁸ (if previously exists)	*RW	Not applicable
	Parent Directory of OPTFILE⁸	*WX	Not applicable
	Path Prefix of OPTFILE⁸	*X	Not applicable
	Root Directory (/) of Optical Volume ^8,9	*RWX	Not applicable
	Optical Volume¹⁰	*CHANGE	Not applicable
SAVS36F	From-file	*USE	*EXECUTE
	To-file, when it is a physical file	*ALL	Refer to the general rules.
	Device file or device description	*USE	*EXECUTE
SAVS36LIBM	To-file, when it is a physical file	*ALL	Refer to the general rules.
	From-file	*USE	*EXECUTE
	Device file or device description	*USE	*EXECUTE
STRAPF ³	Source file	OBJMGT, CHANGE	READ, ADD
STRAPF ³	Commands CRTPF, CRTLF, ADDPFM, ADDLFM, and RMVM	*USE	*EXECUTE
STRDFU ³	Program (if create program option)		READ, ADD
	Program (if change or delete program option)	*OBJEXIST	READ, ADD
	File (if change or display data option)	OBJOPR, ADD, UPD, DLT	*EXECUTE
	File (if display data option)	*READ	*EXECUTE
UPDDTA	File	*CHANGE	*EXECUTE
WRKDDMF ^{3, 14}	DDM file	OBJOPR, OBJMGT, *OBJEXIST	*READ
WRKF ^3,5	Files	*OBJOPR	*USE
WRKPFCST³			*EXECUTE
¹ The CPYFRMQRYF command uses a FROMOPNID parameter rather than a FROMFILE parameter. A user must have sufficient authority to perform the OPNQRYF command before running the CPYFRMQRYF command. If CRTFILE(YES) is specified on the CPYFRMQRYF command, the first file specified on the corresponding OPNQRYF FILE parameter is considered to be the from-file when determining the authorities for the new to-file. ² Ownership or operational authority to the file is required. ³ To use individual operations, you must have the authority required by the individual operation. ⁴ If a new file is created and an authority holder exists for the file, then the user must have all (ALL) authority to the authority holder or be the owner of the authority holder. If there is no authority holder, the owner of the file is the user who entered the RSTS36F command and the public authority is *ALL. ⁵ Some authority to the object is required.
⁶ You must have ALLOBJ special authority. ⁷ Authority is verified when the DDM file is used. ⁸ This authority check is only made when the Optical media format is Universal Disk Format (UDF). ⁹ This authority check is only made if you are clearing the optical volume. ¹⁰ Optical volumes are not actual system objects. The link between the optical volume and the authorization list used to secure the volume is maintained by the optical support function. ¹¹ You must have ALLOBJ or AUDIT special authority to use this command. ¹² If the file has active row access control (an active permission) the user must also have OBJEXIST. ¹³ You must have IOSYSCFG special authority. ¹⁴ You must have IOSYSCFG special authority or be authorized to the QIBM_IOSYSCFG_VIEW function ID. ¹⁵ To view the current values when prompting, you must have IOSYSCFG special authority or be authorized to the QIBM_IOSYSCFG_VIEW function ID. ¹⁶ You must have IOSYSCFG special authority to delete Distributed Data Management (DDM) files when SYSTEM(RMT) or SYSTEM(FILETYPE) is specified.