Question & Answer
Question
When the DSPOBJAUT/EDTOBJAUT commands are used, the user column displays *GROUP and under the Group column there is a name of a group profile, what does it indicate?
Cause
When I display an Object in a library, the User column displays *GROUP and under the Group column there is a name of a group profile, but the indicator is not always present.
The *GROUP parameter is listed under the User column if the user issuing the DSPOBJAUT/EDTOBJAUT is authorized to this object via the group profile. A group profile name is shown when the value of the User column is *GROUP.
The user that uses the DSPOBJAUT on the following example is a member of the group profile LEVEL2 and is authorized to this object via the group profile:
The user that uses the DSPOBJAUT on the following example is a NOT member of the group profile LEVEL2 but is authorized to the object via other authorities:
On this second example. the fact that *GROUP parameter is missing from the display does not indicate that the object is NOT secured by a the group profile LEVEL2.
On this second example, the fact that *GROUP is missing from the display does NOT indicate that LEVEL2 is NOT a group profile.
To find out the group profiles on your system and their members, you can use the command DSPAUTUSR SEQ(*GRPPRF) :
For additional information, refer to the Security Reference Manual.
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"ARM Category":[{"code":"a8m0z0000000CHyAAM","label":"Security"}],"ARM Case Number":"TS009019967","Platform":[{"code":"PF012","label":"IBM i"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
12 April 2022
UID
ibm16571235