Use the Print Private Authorities command (PRTPVTAUT)

This article describes how to use the print private authorities command (PRTPVTAUT), explains why it is important, and provides step-by-step instructions.

The Print Private Authorities (PRTPVTAUT) command allows you to print a report of all the private authorities for objects of a specified type in a specified library, folder, or directory. The report lists all objects of the specified type and the users that are authorized to the object. This is a way to check for different sources of authority to objects.

This command prints three reports for the selected objects. The first report (Full Report) contains all of the private authorities for each of the selected objects. The second report (Changed Report) contains additions and changes to the private authorities to the selected objects if the PRTPVTAUT command was previously run for the specified objects in the specified library, folder, or directory. Any new objects of the selected type, new authorities to existing objects, or changes to existing authorities to the existing objects are listed in the 'Changed Report'. If the PRTPVTAUT command was not previously run for the specified objects in the specified library, folder, or directory, there will be no 'Changed Report'. If the command has been previously run but no changes have been made to the authorities on the objects, then the 'Changed Report' is printed but there are no objects listed.

The third report (Deleted Report) contains any deletions of privately authorized users from the specified objects since the PRTPVTAUT command was previously run. Any objects that were deleted or any users that were removed as privately authorized users are listed in the 'Deleted Report'. If the PRTPVTAUT command was not previously run, there will be no 'Deleted Report'. If the command has been previously run but no delete operations have been done to the objects, then the 'Deleted Report' is printed but there are no objects listed.

Restriction: You must have *ALLOBJ special authority to use this command.

Examples: This command creates the full, changed, and deleted reports for all file objects in the PAYROLLLIB:

PRTPVTAUT OBJTYPE(*FILE) LIB(PAYROLLLIB)

This command creates the full, changed, and deleted reports for all the stream file objects in the directory garry:

PRTPVTAUT OBJTYPE(*STMF) DIR(/GARRY) SCHSUBDIR(*NO)

This command creates the full, changed, and deleted reports for all the stream file objects in the subdirectory structure that starts at the directory garry:

PRTPVTAUT OBJTYPE(*STMF) DIR(/GARRY) SCHSUBDIR(*YES)

Print user profile reports

The following commands provide user profile reports.

Print User Profile (PRTUSRPRF)
This command allows you to print a report containing information for the user profiles on the system. Four different reports can be printed. One contains authority type information, one contains environment type information, one contains password type information, and one contains password level type information.
Analyze Default Password (ANZDFTPWD)
This command allows you to print a report of all the user profiles on the system that have a default password and to take an action against the profiles. A profile has a default password when the user profile name matches the profile’s password. User profiles on the system that have a default password can be disabled and their passwords can be set to expired.