IBM Support

Changing QGPL *PUBLIC authority from *CHANGE to *USE / *EXCLUDE

General Page

This document explains setting up QGPL library *PUBLIC authority.
The QGPL library is shipped with *PUBLIC authority set to *CHANGE.
QGPL stands for General Purpose Library, it's a common use library for users when they are not using their own personal libraries.
The authority is set to *CHANGE because the library is available for everyone's use.
Some possible implication  of changing *PUBLIC authority of this library
-----
May cause errors and some failures in host server related jobs.  One example is QZDASRVSD (database host server) in the QSERVER subsystem, which has been seen to receive many instances of message CPF1887 "Error occurred changing IPL attributes and also  message CPIAD07 RC5 "Starting of the host server job failed.  

Changing *PUBLIC authority to more restrictive may seen above errors and other unpredictable results might occur.
Also, noted from IBM InfoCenter 
Caution should be used when changing the public authority on IBM-supplied objects. For example, changing the public authority on the QSYSOPR message queue to be more restrictive than *CHANGE will cause  some system programs to fail. The system programs will not have enough authority to send messages to the QSYSOPR message queue. For more     
information, refer to the System i Security Reference, SC41-5302.     

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CHjAAM","label":"Job and Work Management"},{"code":"a8m3p000000GnzFAAS","label":"Job and Work Management-\u003EAuthority"}],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"All Versions"}]

Document Information

Modified date:
27 March 2024

UID

ibm10886515