170 lines
6.9 KiB
HTML
170 lines
6.9 KiB
HTML
|
|
||
|
|
<!doctype html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head><META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<title>Print Adopting Objects (PRTADPOBJ)</title>
|
||
|
|
<link rel="stylesheet" type="text/css" href="../rzahg/ic.css">
|
||
|
|
</head>
|
||
|
|
<body bgcolor="white">
|
||
|
|
<script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<a name="PRTADPOBJ.Top_Of_Page"></a>
|
||
|
|
<h2>Print Adopting Objects (PRTADPOBJ)</h2>
|
||
|
|
<table width="100%">
|
||
|
|
<tr>
|
||
|
|
<td valign="top" align="left"><b>Where allowed to run: </b>All environments (*ALL)<br>
|
||
|
|
<b>Threadsafe: </b>No
|
||
|
|
</td>
|
||
|
|
<td valign="top" align="right">
|
||
|
|
<a href="#PRTADPOBJ.PARAMETERS.TABLE">Parameters</a><br>
|
||
|
|
<a href="#PRTADPOBJ.COMMAND.EXAMPLES">Examples</a><br>
|
||
|
|
<a href="#PRTADPOBJ.ERROR.MESSAGES">Error messages</a></td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<div> <a name="PRTADPOBJ"></a>
|
||
|
|
<p>The Print Adopting Objects (PRTADPOBJ) command allows you to print a report of the objects that adopt the special and private authorities of the specified user profile. This is a way to check for security exposures associated with program adoption.
|
||
|
|
</p>
|
||
|
|
<p><b>Restrictions:</b>
|
||
|
|
</p>
|
||
|
|
<ol>
|
||
|
|
<li>You must have *ALLOBJ or *AUDIT special authority to use this command.
|
||
|
|
</li>
|
||
|
|
<li>The user profile specified on the command is locked while the command is running. The lock prevents such things as objects having their owner changed to this profile. If this profile owns a lot of objects, the profile could be locked for an extended period of time.
|
||
|
|
</li>
|
||
|
|
</ol>
|
||
|
|
<p>This command will print two reports for a user profile. The first report (Full Report) will contain all of the objects that adopt the authorities of the user profile. The second report (Changed Report) will contain the objects that now adopt the authorities of the user profile that did not adopt the authorities of the user profile when the PRTADPOBJ command was previously run for the user profile. If the PRTADPOBJ command was not previously run for the user profile, there will be no 'Changed Report'. If the command has been previously run for the user profile but no additional objects adopt the authorities of the user profile, then the 'Changed Report' will be printed but there will be no objects listed.
|
||
|
|
</p>
|
||
|
|
<p>The reports will contain the following information:
|
||
|
|
</p>
|
||
|
|
<ul>
|
||
|
|
<li>The name of the user profile.
|
||
|
|
</li>
|
||
|
|
<li>The special authorities that the user profile has.
|
||
|
|
</li>
|
||
|
|
<li>The date and time the report was last run (shown on Changed Report only).
|
||
|
|
</li>
|
||
|
|
<li>An entry for each object that adopts the user profile's authority. Each entry contains the following information:
|
||
|
|
<ul>
|
||
|
|
<li>The name of the object.
|
||
|
|
</li>
|
||
|
|
<li>The type of object.
|
||
|
|
</li>
|
||
|
|
<li>The object's *PUBLIC authority. If the object or the object's library is locked at the time the report is created, the value is set to *LOCKED.
|
||
|
|
</li>
|
||
|
|
<li>The name of the library the object is in.
|
||
|
|
</li>
|
||
|
|
<li>The library's *PUBLIC authority. If the library is locked at the time the report is created, the value is set to *LOCKED.
|
||
|
|
</li>
|
||
|
|
<li>An indication of whether there are any private authorities on the object ('Y' or 'N'). If the object or the object's library is locked at the time the report is created, the value is left blank.
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
<p>
|
||
|
|
<b>Note: </b>If there are no objects that adopt the authority of a user profile, no reports will be printed for that user. If none of the user profiles specified on the command have objects that adopt the authority of the user profiles, then there will be no reports generated.
|
||
|
|
</p>
|
||
|
|
<p>The file QSECADPOLD in library QUSRSYS contains information from the last time the PRTADPOBJ command was run for a user profile. There is a member within the file, with the same name as the user profile, for each profile that has been previously specified on the command. System file QADPGMAD in library QSYS with format name of QSYPGMAD is the model file for the QSECADPOLD file.
|
||
|
|
</p>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#PRTADPOBJ.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<hr size="2" width="100%">
|
||
|
|
|
||
|
|
<div>
|
||
|
|
<h3><a name="PRTADPOBJ.PARAMETERS.TABLE">Parameters</a></h3>
|
||
|
|
<table border="1" cellpadding="4" cellspacing="0">
|
||
|
|
<!-- col1="10" col2="15" col3="30" col4="10" -->
|
||
|
|
<tr>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Keyword</th>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Description</th>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Choices</th>
|
||
|
|
<th bgcolor="aqua" valign="bottom" align="left">Notes</th>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td valign="top"><a href="#PRTADPOBJ.USRPRF"><b>USRPRF</b></a></td>
|
||
|
|
<td valign="top">User profile</td>
|
||
|
|
<td valign="top"><i>Generic name, name</i>, *ALL</td>
|
||
|
|
<td valign="top">Required, Positional 1</td>
|
||
|
|
</tr>
|
||
|
|
<tr>
|
||
|
|
<td valign="top"><a href="#PRTADPOBJ.CHGRPTONLY"><b>CHGRPTONLY</b></a></td>
|
||
|
|
<td valign="top">Changed report only</td>
|
||
|
|
<td valign="top"><b><u>*NO</u></b>, *YES</td>
|
||
|
|
<td valign="top">Optional, Positional 2</td>
|
||
|
|
</tr>
|
||
|
|
</table>
|
||
|
|
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#PRTADPOBJ.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
</div>
|
||
|
|
<div> <a name="PRTADPOBJ.USRPRF"></a>
|
||
|
|
<h3>User profile (USRPRF)</h3>
|
||
|
|
<p>This is a required parameter.
|
||
|
|
</p>
|
||
|
|
<p>The name of the user profile whose adopted object information will be printed.
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>*ALL</b></dt>
|
||
|
|
<dd>The adopted information will be printed for all user profiles.
|
||
|
|
</dd>
|
||
|
|
<dt><b><i>name</i></b></dt>
|
||
|
|
<dd>The name of the user profile to print the adopted information for.
|
||
|
|
</dd>
|
||
|
|
<dt><b><i>generic-name</i></b></dt>
|
||
|
|
<dd>The generic name of the user profile to print the adopted information for. A generic name is a character string of one or more characters followed by an asterisk (*).
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#PRTADPOBJ.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<div> <a name="PRTADPOBJ.CHGRPTONLY"></a>
|
||
|
|
<h3>Changed report only (CHGRPTONLY)</h3>
|
||
|
|
<p>Specifies whether just the changed report should be printed.
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b><u>*NO</u></b></dt>
|
||
|
|
<dd>The full and changed reports will be printed.
|
||
|
|
</dd>
|
||
|
|
<dt><b>*YES</b></dt>
|
||
|
|
<dd>Only the changed report will be printed.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#PRTADPOBJ.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<hr size="2" width="100%">
|
||
|
|
<div><h3><a name="PRTADPOBJ.COMMAND.EXAMPLES">Examples</a> </h3>
|
||
|
|
<p>
|
||
|
|
<pre>
|
||
|
|
PRTADPOBJ USRPRF(OURSECOFR)
|
||
|
|
</pre>
|
||
|
|
</p>
|
||
|
|
<p>This command prints both full and changed reports for the objects that adopt the special and private authorities of the user profile OURSECOFR.
|
||
|
|
</p>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#PRTADPOBJ.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
<hr size="2" width="100%">
|
||
|
|
<div><h3><a name="PRTADPOBJ.ERROR.MESSAGES">Error messages</a> </h3>
|
||
|
|
<p><b><u>*ESCAPE Messages</u></b>
|
||
|
|
</p>
|
||
|
|
<dl>
|
||
|
|
<dt><b>CPFB304</b></dt>
|
||
|
|
<dd>User does not have required special authorities.
|
||
|
|
</dd>
|
||
|
|
<dt><b>CPFB307</b></dt>
|
||
|
|
<dd>Command &1 in use in another job.
|
||
|
|
</dd>
|
||
|
|
</dl>
|
||
|
|
</div>
|
||
|
|
<table width="100%">
|
||
|
|
<tr><td align="right"><a href="#PRTADPOBJ.Top_Of_Page">Top</a></td></tr>
|
||
|
|
</table>
|
||
|
|
</body>
|
||
|
|
</html>
|