Authority for new objects

This system value is used to determine the public authority for a newly created object.

This setting is used as the default public authority for create commands to be set throughout the system if you create a new object and do not specify an authority level.

See Table 2 for information on this system value.

Table 1. Possible values for the authority for new objects system value
iSeries™ Navigator	Character-based interface	Description
Change	*CHANGE	Allows the public to change newly created objects.
Use	*USE	Allows objects that are not able to be audited in all directories, in addition to the QTEMP library.
All	*ALL	Allows all users of the system, except those given an authority less than All, to completely control the newly created objects. These users will be able to read, change, delete, and manage the security of these objects.
Exclude	*EXCLUDE	The public is not allowed to use new objects.

Relationship to security policy

Table 2. Quick Reference. Provides details for the authority for new objects system value.
iSeries Navigator name	Default authority for newly created objects in QSYS.LIB file system
Character-based interface name	QCRTAUT
Authority	ALLOBJ SECADM Note: The QSECOFR user profile is shipped with these authorities.
How to access	iSeries Navigator Expand Security > Policies. Right click Security Policy and select Properties. On the Public Authority page, you will find the options for this system value. Character-based interface In the character-based interface, type `WRKSYSVAL QCRTAUT`.
Changes take effect	Immediately
Default value	Change
Recommended value	Change
Lockable	Yes
Special considerations	The authority for new objects system value is not used for objects created in directories in the enhanced file system. Several IBM-supplied libraries, including QSYS, have the create authority (CRTAUT) command set to point to the system value (*SYSVAL).

For more detailed information about this security value, see Chapter 3, "Security System Values" in Security Reference.