Whenever you try to access an object, the operating system checks your authority to that object.
If the security level on your system (QSECURITY system value) is set to 10 or 20, every user automatically has authority to access every object because every user profile has *ALLOBJ special authority.
Object authority tip: If you are not sure whether you are using object security, check the QSECURITY (security level) system value. If QSECURITY is 10 or 20, you are not using object security.
You must plan and prepare before you change to security level 30 or higher. Otherwise, your users may not be able to access the information that they need.