AUTHORIZATION_LIST_USER_INFO view

The AUTHORIZATION_LIST_USER_INFO view returns a list of all authorization lists and their authorities.

The information returned is similar to the information available through the Display Authorization List (DSPAUTL) CL command.

Authorization: All authorized users are returned when the caller has at least one of the following:
  • *AUTLMGT authority to the *AUTL, or
  • Ownership of the *AUTL, or
  • Authorized to the QIBM_DB_SECADM function usage identifier.
Otherwise, only authorizations for the caller are returned.

The following table describes the columns in the view. The system name is AUTL_USERS. The schema is QSYS2.

Table 1. AUTHORIZATION_LIST_USER_INFO view
Column name System column name Data type Description
AUTHORIZATION_LIST AUTL VARCHAR(10) The name of the authorization list.
AUTHORIZATION_NAME USER_NAME VARCHAR(10) User profile name. Can contain the following special value.
*PUBLIC
This row contains the public authority for the object.
OBJECT_AUTHORITY OBJ_AUTH VARCHAR(12) The authority that the user has to the object. Contains one of the following values:
*ALL
Allows all operations on the object except those that are limited to the owner or controlled by authorization list management authority.
*CHANGE
Allows all operations on the object except those that are limited to the owner or controlled by object existence authority, object alter authority, object reference authority, and object management authority.
*EXCLUDE
All operations on the object are prohibited.
*USE
Allows access to the object attributes and use of the object. The user cannot change the object.
USER DEFINED
The specific object authorities and data authorities do not match any of the predefined object authority levels.
AUTHORIZATION_LIST_MANAGEMENT AUTL_MGMT VARCHAR(3) The authorization list management authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
OWNER OWNER VARCHAR(10) The owner of the authorization list.
OBJECT_OPERATIONAL OBJOPER VARCHAR(3) The object operational authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
OBJECT_MANAGEMENT OBJMGT VARCHAR(3) The object management authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
OBJECT_EXISTENCE OBJEXIST VARCHAR(3) The object existence authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
OBJECT_ALTER OBJALTER VARCHAR(3) The object alter authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
OBJECT_REFERENCE OBJREF VARCHAR(3) The object reference authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
DATA_READ DATA_READ VARCHAR(3) The data read authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
DATA_ADD DATA_ADD VARCHAR(3) The data add authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
DATA_UPDATE DATA_UPD VARCHAR(3) The data update authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
DATA_DELETE DATA_DEL VARCHAR(3) The data delete authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
DATA_EXECUTE DATA_EXEC VARCHAR(3) The data execute authority for AUTHORIZATION_NAME.
NO
The user does not have this authority.
YES
The user has this authority.
TEXT_DESCRIPTION TEXT VARCHAR(50)
Nullable
 The descriptive text for the authorization list.

Contains null if the authorization list has no text description.

Example

List the public security settings for all authorization lists. 
SELECT *
   FROM QSYS2.AUTHORIZATION_LIST_USER_INFO
   WHERE AUTHORIZATION_NAME = '*PUBLIC';