77 lines
4.6 KiB
HTML
77 lines
4.6 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Security considerations for objects" />
|
||
|
|
<meta name="abstract" content="When the system accesses an object that you refer to, it checks to determine if you are authorized to use the object and to use it in the way you are requesting." />
|
||
|
|
<meta name="description" content="When the system accesses an object that you refer to, it checks to determine if you are authorized to use the object and to use it in the way you are requesting." />
|
||
|
|
<meta name="DC.subject" content="object, security, for object" />
|
||
|
|
<meta name="keywords" content="object, security, for object" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="uslib.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="secdspaud.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="accob.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="../books/sc415302.pdf" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rglib.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 1998, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="secur" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Security considerations for objects</title>
|
||
|
|
</head>
|
||
|
|
<body id="secur"><a name="secur"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Security considerations for objects</h1>
|
||
|
|
<div><p>When the system accesses an object that you refer to, it checks
|
||
|
|
to determine if you are authorized to use the object and to use it in the
|
||
|
|
way you are requesting.</p>
|
||
|
|
<p>Generally, you must be authorized at two levels:</p>
|
||
|
|
<ul><li>You must be authorized to use the object on which you have requested a
|
||
|
|
function to be performed.</li>
|
||
|
|
<li>You must be authorized to the library containing the object. If a library
|
||
|
|
list is used, you must be authorized to the libraries in the list.</li>
|
||
|
|
</ul>
|
||
|
|
<p>Object authority is controlled by the system's security functions, which
|
||
|
|
include the following:</p>
|
||
|
|
<ul><li>An object owner and users with *ALLOBJ special authority have all authority
|
||
|
|
for an object, and can grant and revoke authority to and from other users.</li>
|
||
|
|
<li>Users have public authority when private authority has not been granted
|
||
|
|
to them for the object.</li>
|
||
|
|
</ul>
|
||
|
|
<p>Special considerations apply when writing a program that must be secure
|
||
|
|
(for example, a program that adopts the security officer's user profile).</p>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<ul class="ullinks">
|
||
|
|
<li class="ulchildlink"><strong><a href="secdspaud.htm">Use the Display Audit Journal Entries (DSPAUDJRNE) command</a></strong><br />
|
||
|
|
The <span class="cmdname">Display Audit Journal Entries (DSPAUDJRNE)</span> command
|
||
|
|
allows you to generate security journal audit reports. </li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="uslib.htm" title="A library is an object used to group related objects and to find objects by name. Thus, a library is a directory to a group of objects.">Use libraries</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
||
|
|
<div><a href="accob.htm" title="On the iSeries server, objects are grouped in special objects called libraries.">Libraries</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="reltasks"><strong>Related tasks</strong><br />
|
||
|
|
<div><a href="rglib.htm" title="Certain authorities can be given to users for libraries.">Specify authority for libraries</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relinfo"><strong>Related information</strong><br />
|
||
|
|
<div><a href="../books/sc415302.pdf" target="_blank">iSeries Security Reference PDF</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|