Save security data

Save user profiles, private authorities, authorization lists, and authority holders.

SAVSYS or SAVSECDTA command

Use the SAVSYS command or the Save Security Data (SAVSECDTA) command to save the following security data:

User profiles
Private authorities
Authorization lists
Authority holders

You can use the SAVSYS or SAVESECDTA commands to save private authorities for objects on independent ASPs.

The server stores additional security data with each object. The server saves this security data when it saves the object, as follows:

Public authority
Owner and owner authority
Primary group and primary group authority
Authorization list linked to object

To save security data, the command does not require that your server be in a restricted state. However, you cannot delete user profiles while the server saves security data. If you change user profiles or grant authority while you save security data, your saved information may not reflect the changes.

To reduce the size of a large user profile, do one or more of the following:

Transfer ownership of some objects to another user profile.
Remove the private authority to some objects for that user profile.

Your server stores authority information for objects in the /QNTC file systems. The information about iSeries™ Integration for Windows^® Server describes how to save security data for Windows Server.

Note: If you use authorization lists to secure objects in library QSYS, you should write a program to produce a file of those objects. Include this file in the save. This is because the association between the object and the authorization list is lost during a restore operation due to QSYS being restored prior to user profiles. Refer to "What You Should Know About Restoring User Profiles" in the Backup and Recovery book Link to PDF

for more information.

QSRSAVO API

You can use the Save Objects List (QSRSAVO) API to save User Profiles.