96 lines
6.2 KiB
HTML
96 lines
6.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Determine library owner" />
|
||
|
|
<meta name="abstract" content="When you plan your application installation, you must first decide the user profiles and installation values for each application." />
|
||
|
|
<meta name="description" content="When you plan your application installation, you must first decide the user profiles and installation values for each application." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvplanlibsec.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="determinelibowner" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Determine library owner</title>
|
||
|
|
</head>
|
||
|
|
<body id="determinelibowner"><a name="determinelibowner"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Determine library owner</h1>
|
||
|
|
<div><p>When you plan your application installation, you must first decide
|
||
|
|
the user profiles and installation values for each application.</p>
|
||
|
|
<p><span class="uicontrol">Determining user profiles and installation values for applications:</span> Before
|
||
|
|
you install an application that was created on another system, you may need
|
||
|
|
to create one or more user profiles. The user profile that owns the application
|
||
|
|
libraries and objects should exist on your system before you load the libraries
|
||
|
|
on your system. Record the profiles you need to create for each library and
|
||
|
|
what parameters the profiles need on the Application installation form.</p>
|
||
|
|
<div class="p">To determine the installation values necessary, ask your programmer or
|
||
|
|
application provider the following questions and record their answers on the
|
||
|
|
Application installation form:<ul><li>What profile owns the application library?</li>
|
||
|
|
<li>What profile owns the objects in the library?</li>
|
||
|
|
<li>What is the public authority to the library (AUT)?</li>
|
||
|
|
<li>What is the public authority for new objects (CRTAUT)?</li>
|
||
|
|
<li>What is the public authority for objects in the library?</li>
|
||
|
|
<li>What programs, if any, adopt the authority of the owner?</li>
|
||
|
|
</ul>
|
||
|
|
Find out whether your programmers or application provider have created
|
||
|
|
any authorization lists for the application. Prepare an Authorization list
|
||
|
|
form for each created authorization list or ask your programmer for information
|
||
|
|
about the list. You can determine whether you should change any installation
|
||
|
|
values.</div>
|
||
|
|
<p><span class="uicontrol">Changing installation values for applications:</span> Compare
|
||
|
|
the information from the Application installation form with your resource
|
||
|
|
security plan for the library on the Library description form. If they are
|
||
|
|
different, you need to decide what changes to make after the application is
|
||
|
|
installed. </p>
|
||
|
|
<p><span class="uicontrol">Changing application ownership:</span> If your programmer
|
||
|
|
or application provider has created a special profile to own the application
|
||
|
|
libraries and objects, consider using that profile, even if it does not match
|
||
|
|
your naming conventions.</p>
|
||
|
|
<p>Transferring ownership of objects can take a long time and should be avoided.
|
||
|
|
If one of the IBM-supplied group profiles, such as QSECOFR or QPGMR, owns
|
||
|
|
the application, you should transfer ownership to another profile after you
|
||
|
|
install the application. Sometimes programmers design applications to prevent
|
||
|
|
changes in object ownership. Try to work within the restrictions and still
|
||
|
|
meet your own requirements for managing security. However, if an IBM-supplied
|
||
|
|
profile, such as QSECOFR, owns the application, you and your programmer or
|
||
|
|
application provider need to develop a plan to change ownership. Ideally,
|
||
|
|
you should change ownership before you install the application.</p>
|
||
|
|
<p><span class="uicontrol">Changing public authority:</span> When you save objects,
|
||
|
|
you also save their public authority with them. When you restore an application
|
||
|
|
library to your system, the library and all its objects will have the same
|
||
|
|
public authorities they had when they were saved. This is true even if you
|
||
|
|
saved the library on another system. The CRTAUT value for a library (public
|
||
|
|
authority for new objects) does not affect objects that are restored. They
|
||
|
|
are restored with their saved public authority, regardless of the CRTAUT for
|
||
|
|
the library.</p>
|
||
|
|
<div class="p">You should change the public authority of libraries and objects to match
|
||
|
|
your plan on the Library description form. To ensure that you have planned
|
||
|
|
your application installation completely, you should:<ul><li>Finish filling out your initial Application installation
|
||
|
|
form. Then go back and prepare forms for each additional application.</li>
|
||
|
|
<li>Review all your forms and make sure they are complete. Make copies of
|
||
|
|
your forms and keep them in a secure location until you have installed your
|
||
|
|
system and your licensed programs.</li>
|
||
|
|
</ul>
|
||
|
|
After you finished these planning tasks, you are ready to set up your
|
||
|
|
user security.</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvplanlibsec.htm" title="This topic describes how to plan security for the libraries on your system.">Plan library security</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|