| Where allowed to run: All environments (*ALL) Threadsafe: No |
Parameters Examples Error messages |
The Display Object Authority (DSPOBJAUT) command displays the list of authorized users of an object and their assigned authority. If the object is secured by an authorization list, the name of the authorization list is also displayed. The public authority and primary group authority are also shown.
If the user entering the command does not have object management (*OBJMGT) authority to the object, only that user's name and authorities are shown. The names of the other users and their authorities for the object are not shown. If an object does not have an owner name associated with it, no authorities for the object are shown.
The following are shown for the specified object:
Restrictions: You must have use (*USE) authority to the auxiliary storage pool device if one is specified.
| Top |
| Keyword | Description | Choices | Notes |
|---|---|---|---|
| OBJ | Object | Qualified object name | Required, Positional 1 |
| Qualifier 1: Object | Name | ||
| Qualifier 2: Library | Name, *LIBL, *CURLIB | ||
| OBJTYPE | Object type | *ALRTBL, *AUTL, *BNDDIR, *CFGL, *CHTFMT, *CLD, *CLS, *CMD, *CNNL, *COSD, *CRG, *CRQD, *CSI, *CSPMAP, *CSPTBL, *CTLD, *DEVD, *DOC, *DTAARA, *DTADCT, *DTAQ, *EDTD, *EXITRG, *FCT, *FILE, *FLR, *FNTRSC, *FNTTBL, *FORMDF, *FTR, *GSS, *IGCDCT, *IGCSRT, *IGCTBL, *IMGCLG, *IPXD, *JOBD, *JOBQ, *JOBSCD, *JRN, *JRNRCV, *LIB, *LIND, *LOCALE, *M36, *M36CFG, *MEDDFN, *MENU, *MGTCOL, *MODD, *MODULE, *MSGF, *MSGQ, *NODGRP, *NODL, *NTBD, *NWID, *NWSCFG, *NWSD, *OUTQ, *OVL, *PAGDFN, *PAGSEG, *PDFMAP, *PDG, *PGM, *PNLGRP, *PRDAVL, *PRDDFN, *PRDLOD, *PSFCFG, *QMFORM, *QMQRY, *QRYDFN, *RCT, *S36, *SBSD, *SCHIDX, *SPADCT, *SQLPKG, *SQLUDT, *SRVPGM, *SSND, *SVRSTG, *TBL, *TIMZON, *USRIDX, *USRPRF, *USRQ, *USRSPC, *VLDL, *WSCST | Required, Positional 2 |
| ASPDEV | ASP device | Name, *, *SYSBAS | Optional |
| OUTPUT | Output | *, *PRINT, *OUTFILE | Optional, Positional 3 |
| OUTFILE | File to receive output | Single values: *NONE Other values: Qualified object name |
Optional |
| Qualifier 1: File to receive output | Name | ||
| Qualifier 2: Library | Name, *LIBL, *CURLIB | ||
| OUTMBR | Output member options | Element list | Optional |
| Element 1: Member to receive output | Name, *FIRST | ||
| Element 2: Replace or add records | *REPLACE, *ADD | ||
| AUTTYPE | Authority type | *OBJECT, *FIELD, *ALL | Optional |
| Top |
Specifies the object for which the authorized users and their authority are to be displayed.
This is a required parameter.
Qualifier 2: Library
| Top |
Specifies the object type of the object whose authority is to be displayed, such as program (*PGM), file (*FILE), or library (*LIB). To see a complete list of object types when prompting this command, position the cursor on the field for this parameter and press F4 (Prompt).
This is a required parameter.
| Top |
Specifies the auxiliary storage pool (ASP) device name where the library that contains the object (OBJ parameter) is located. If the object's library resides in an ASP that is not part of the library name space associated with the job, this parameter must be specified to ensure the correct object is used as the target of this command's operation.
| Top |
Specifies where the output from the command is sent.
| Top |
Specifies the database file to which the output of the command is directed. If the file does not exist, this command creates a database file in the specified library. If the file is created, the public authority for the file is the same as the create authority specified for the library in which the file is created. Use the Display Library Description (DSPLIBD) command to show the library's create authority.
Qualifier 1: File to receive output
Qualifier 2: Library
Note: If a new file is created, the system uses QAOBJAUT in QSYS with a format name of QSYDSAUT as a model.
If AUTTYPE(*FIELD) is specified for a *FILE object and a new outfile is created, the system uses QAFLDAUT in QSYS with a format name of QSYDSFLD as a model.
| Top |
Specifies the name of the database file member that receives the output of the command.
Element 1: Member to receive output
Element 2: Replace or add records
| Top |
Specifies whether object level authority, field level authority, or both object level and field level authority are displayed. Field level authority information only applies to *FILE objects.
If OUTPUT(*) is requested and the object is a file with field level authorities, the F16 key, Display Field Authorities, will be enabled on the display.
This value is only valid if *FILE is specified for the Object type (OBJTYPE) parameter.
This value is only valid if *FILE is specified for the Object type (OBJTYPE) parameter.
| Top |
Example 1: Displaying Users and Authorities
DSPOBJAUT OBJ(ARLIB/PROG1) OBJTYPE(*PGM)
This command shows the authorized users and their authorities for the object named PROG1 to the user who entered the command, if that user has object management authority for the object. If the user does not have object management authority, only personal authorities are shown. PROG1 is a program (*PGM) located in the library named ARLIB. The system assumes * for the device that shows the output list. If the command was entered in the batch subsystem, the output is placed in the default output queue for the job. If the command was entered in the interactive subsystem, the output is shown on the device where the user entered the command.
Example 2: Printing List of Users
DSPOBJAUT OBJ(ARLIB/PROG2) OBJTYPE(*PGM) OUTPUT(*PRINT)
This command causes the list of authorized users of the program named PROG2 in the ARLIB library to be printed. If the user who enters the command does not have object management authority for the program, only that user's name and authorities are printed.
| Top |
*ESCAPE Messages
| Top |