Work with Authority (WRKAUT)

The Work with Authority (WRKAUT) command shows the list of authorized users of an object and their associated authorities. From the list, you can select from options to perform the following:

Add a user
Change user authority
Remove a user

The following are displayed for the specified object:

The object path name
The name of the object's owner
The name of the object's primary group
A list of all the users who are authorized to use the object
The authorities that each user has for the object

If an object does not have an owner name associated with it, no authorities for the object are shown.

See Appendix D of the iSeries Security Reference, SC41-5302 for the authorities needed to use this command.

For more information about integrated file system commands, see the Integrated file system information in the iSeries Information Center at http://www.ibm.com/eserver/iseries/infocenter.

Keyword	Description	Choices	Notes
OBJ	Object	Path name	Required, Positional 1
SYMLNK	Symbolic link	NO, YES	Optional

Object (OBJ)

Specifies the objects for which the authorized users and their authorities are to be shown.

For more information on specifying path names, refer to "Object naming rules" in the CL concepts and reference topic in the iSeries Information Center at http://www.ibm.com/eserver/iseries/infocenter.

This is a required parameter.

path-name: Specify the path name of the objects for which specific authorities are to be shown.
The object path name can be either a simple name or a name that is qualified with the name of the directory in which the object is located. A pattern can be specified in the last part of the path name. An asterisk (*) matches any number of characters and a question mark (?) matches a single character. If the path name is qualified or contains a pattern, it must be enclosed in apostrophes.

Symbolic link (SYMLNK)

If the last component in the path name is a symbolic link, specifies whether or not to work with the symbolic link or the object pointed to by the symbolic link.

*NO: The symbolic link object is not worked with. The object pointed to by the symbolic link is worked with.
*YES: If the object is a symbolic link, the symbolic link is worked with. The object pointed to by the symbolic link is not worked with.

Examples

WRKAUT   OBJ('/QSYS.LIB/ARLIB.LIB/PROG1.PGM')

This command causes the list of authorized users and their authorities for the object named PROG1 to be shown. PROG1 is a program located in the library named ARLIB.

Error messages

*ESCAPE Messages

CPDA080: User profile name too long.
CPE3101: A non-recoverable I/O error occurred.
CPE3408: The address used for an argument was not correct.
CPE3418: Possible APAR condition or hardware failure.
CPE3474: Unknown system state.
CPFA0AA: Error occurred while attempting to obtain space.
CPFA0AB: Operation failed for object. Object is &1.
CPFA0AD: Function not supported by file system.
CPFA0A1: An input or output error occurred.
CPFA0A2: Information passed to this operation was not valid.
CPFA0A3: Path name resolution causes looping.
CPFA0A4: Too many open files for process.
CPFA0A5: Too many open files.
CPFA0A7: Path name too long.
CPFA0A9: Object not found. Object is &1.
CPFA0B1: Requested operation not allowed. Access problem.
CPFA0C0: Buffer overflow occurred.
CPFA0C1: CCSID &1 not valid.
CPFA08B: Path name cannot begin with *.
CPFA08C: Pattern not allowed in path name directory.
CPFA08E: More than one name matches pattern.
CPFA085: Home directory not found for user &1.
CPFA086: Matching quote not found in path name.
CPFA087: Path name contains null character.
CPFA088: Path name pattern not valid.
CPFA09C: Not authorized to object. Object is &1.
CPFA09D: Error occurred in program &1.
CPFA09E: Object in use. Object is &1.
CPFA09F: Object damaged. Object is &1.
CPFA091: Pattern not allowed in user name.
CPFA092: Path name not converted.
CPFA093: Name matching pattern not found.
CPFA094: Path name not specified.
CPF1F05: Directory handle not valid.
CPF1F41: Severe error occurred while addressing parameter list.
CPF1F4A: Value for number of directory entries not valid.
CPF1F53: Value for length of data buffer not valid.
CPF2203: User profile &1 not correct.
CPF2225: Not able to allocate internal system object.
CPF22F0: Unexpected errors occurred during processing.
CPF9801: Object &2 in library &3 not found.
CPF9802: Not authorized to object &2 in &3.
CPF9803: Cannot allocate object &2 in library &3.