290 lines
13 KiB
HTML
290 lines
13 KiB
HTML
|
|
<!doctype html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head><META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
|
<title>Restore Authority (RSTAUT)</title>
|
|
<link rel="stylesheet" type="text/css" href="../rzahg/ic.css">
|
|
</head>
|
|
<body bgcolor="white">
|
|
<script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<a name="RSTAUT.Top_Of_Page"></a>
|
|
<h2>Restore Authority (RSTAUT)</h2>
|
|
<table width="100%">
|
|
<tr>
|
|
<td valign="top" align="left"><b>Where allowed to run: </b>All environments (*ALL)<br>
|
|
<b>Threadsafe: </b>No
|
|
</td>
|
|
<td valign="top" align="right">
|
|
<a href="#RSTAUT.PARAMETERS.TABLE">Parameters</a><br>
|
|
<a href="#RSTAUT.COMMAND.EXAMPLES">Examples</a><br>
|
|
<a href="#RSTAUT.ERROR.MESSAGES">Error messages</a></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<div> <a name="RSTAUT"></a>
|
|
<p>The Restore Authority (RSTAUT) command restores the private authorities to user profiles. This command restores the same object authority to specified objects in the user profile that each user profile had when all the profiles were saved by the Save System (SAVSYS) or the Save Security Data (SAVSECDTA) command. It allows existing authorities, given after the save, to remain. Authority cannot be restored to the user profiles until the profiles are first restored to the system by the Restore User Profile (RSTUSRPRF) command and all the objects (for which authority is being given) are restored to the same libraries where they were saved. The objects can be restored by the Restore Library (RSTLIB) or Restore Object (RSTOBJ) command. Documents and folders can be restored using the Restore Document Library Object (RSTDLO) command. Device configuration objects can be restored using the Restore Configuration (RSTCFG) command. Integrated file system objects can be restored by the Restore Object (RST) command.
|
|
</p>
|
|
<p>If the whole system is being restored, the following sequence must be followed. Using the RSTAUT command must be the last step in the sequence.
|
|
</p>
|
|
<ol>
|
|
<li>Restore the operating system. This is an alternative method to load the program. This restores the QSYS library and ensures that the IBM-supplied user profiles are there.
|
|
</li>
|
|
<li>Restore all the saved user profiles to the system (*ALL is the default for the USRPRF parameter) by using the RSTUSRPRF command.
|
|
</li>
|
|
<li>Restore all the configuration and system resource management (SRM) objects to the system by using the RSTCFG command.
|
|
</li>
|
|
<li>Restore all the user libraries by using the RSTLIB command.
|
|
</li>
|
|
<li>Restore all document library objects to the system by using the RSTDLO command.
|
|
</li>
|
|
<li>Restore all objects in directories using the RST command.
|
|
</li>
|
|
<li>Restore the object authority to user profiles by using the RSTAUT command.
|
|
</li>
|
|
</ol>
|
|
<p>
|
|
<b>Note: </b>Steps 2 through 7 can be done more than once. For example, after the user profiles are restored (step 2), the user can restore only critical application libraries (step 3), followed by a restore of object authority (step 7). This supplies an operational system limited to using only the critical libraries. Later, the remaining user profiles can be restored, followed by the operations to restore the libraries and object authority.
|
|
</p>
|
|
<p>If authorities for a user profile are restored using the RSTAUT command while all subsystems are ended, the user profile must be restored again before other authorities for it can be restored.
|
|
</p>
|
|
<p>If one user profile is being restored, the following sequence must be followed. Using the RSTAUT command must be the last step.
|
|
</p>
|
|
<ol>
|
|
<li>Restore the specified user profile to the system by using the RSTUSRPRF command.
|
|
</li>
|
|
<li>Restore all the device configuration and SRM objects to the system by using the RSTCFG command.
|
|
</li>
|
|
<li>Restore the specified user libraries to the system by using the RSTLIB command or the RSTOBJ command. If the user profile is being restored because the current profile on the system is damaged, then the needed libraries already exist on the system and restoring of the libraries is not necessary.
|
|
</li>
|
|
<li>Restore all document library objects to the system using the RSTDLO command.
|
|
</li>
|
|
<li>Restore all objects in directories using the RST command.
|
|
</li>
|
|
<li>Restore the object authority to the user profile by using the RSTAUT command. The specified profile may have been restored using the RSTUSRPRF command.
|
|
</li>
|
|
</ol>
|
|
<p><b>Restrictions:</b>
|
|
</p>
|
|
<ul>
|
|
<li>This command is shipped with no public authority (*EXCLUDE).
|
|
</li>
|
|
<li>You must have save system (*SAVSYS) special authority to run this command.
|
|
</li>
|
|
<li>Only one RSTAUT command can be run on a system at one time.
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<hr size="2" width="100%">
|
|
|
|
<div>
|
|
<h3><a name="RSTAUT.PARAMETERS.TABLE">Parameters</a></h3>
|
|
<table border="1" cellpadding="4" cellspacing="0">
|
|
<!-- col1="10" col2="15" col3="30" col4="10" -->
|
|
<tr>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Keyword</th>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Description</th>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Choices</th>
|
|
<th bgcolor="aqua" valign="bottom" align="left">Notes</th>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top"><a href="#RSTAUT.USRPRF"><b>USRPRF</b></a></td>
|
|
<td valign="top">User profile</td>
|
|
<td valign="top">Single values: <b><u>*ALL</u></b><br>Other values (up to 300 repetitions): <i>Generic name, name</i></td>
|
|
<td valign="top">Optional, Positional 1</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top"><a href="#RSTAUT.SAVASPDEV"><b>SAVASPDEV</b></a></td>
|
|
<td valign="top">Saved from ASP device</td>
|
|
<td valign="top"><i>Name</i>, <b><u>*ALLAVL</u></b>, *, *SYSBAS, *CURASPGRP</td>
|
|
<td valign="top">Optional</td>
|
|
</tr>
|
|
<tr>
|
|
<td valign="top"><a href="#RSTAUT.RSTASPDEV"><b>RSTASPDEV</b></a></td>
|
|
<td valign="top">Restore to ASP device</td>
|
|
<td valign="top"><i>Name</i>, <b><u>*SAVASPDEV</u></b>, *SYSBAS</td>
|
|
<td valign="top">Optional</td>
|
|
</tr>
|
|
</table>
|
|
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
</div>
|
|
<div> <a name="RSTAUT.USRPRF"></a>
|
|
<h3>User profile (USRPRF)</h3>
|
|
<p>Specifies the names of one or more user profiles to have their private authorities restored. The specified user profiles must first be restored using the Restore User Profile (RSTUSRPRF) command.
|
|
</p>
|
|
<p><b>Single values</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*ALL</u></b></dt>
|
|
<dd>Specifies all of the user profiles that are restored but do not have their private authorities restored. This includes user profiles that were restored using multiple previous Restore User Profile (RSTUSRPRF) commands.
|
|
</dd>
|
|
</dl>
|
|
<p><b>Other values (up to 300 repetitions)</b>
|
|
</p>
|
|
<dl>
|
|
<dt><b><i>generic-name</i></b></dt>
|
|
<dd>Specify one or more generic names of sets of user profiles. A generic name is a character string that contains one or more characters followed by an asterisk (*). (If an * is not specified with the name, the system assumes that the name is a complete user profile name.)
|
|
</dd>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify one or more names of specific user profiles. Both generic names and specific names can be specified in the same command. A maximum of 300 user profile names can be specified.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="RSTAUT.SAVASPDEV"></a>
|
|
<h3>Saved from ASP device (SAVASPDEV)</h3>
|
|
<p>Specifies the auxiliary storage pool (ASP) device from which private authorities were saved.
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*ALLAVL</u></b></dt>
|
|
<dd>The private authorities saved from the system ASP (ASP number 1), all basic user ASPs (ASP numbers 2-32), and all available independent ASPs are restored.
|
|
</dd>
|
|
<dt><b>*</b></dt>
|
|
<dd>The private authorities saved from the system ASP, all basic user ASPs, and, if the current thread has an ASP group, all independent ASPs in the ASP group are restored.
|
|
</dd>
|
|
<dt><b>*SYSBAS</b></dt>
|
|
<dd>The private authorities saved from the system ASP and all basic user ASPs are restored.
|
|
</dd>
|
|
<dt><b>*CURASPGRP</b></dt>
|
|
<dd>If the current thread has an ASP group, the private authorities saved from all independent ASPs in the ASP group are restored.
|
|
</dd>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the ASP device from which private authorities were saved.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<div> <a name="RSTAUT.RSTASPDEV"></a>
|
|
<h3>Restore to ASP device (RSTASPDEV)</h3>
|
|
<p>Specifies the auxiliary storage pool (ASP) device for which to restore the private authorities.
|
|
</p>
|
|
<dl>
|
|
<dt><b><u>*SAVASPDEV</u></b></dt>
|
|
<dd>The private authorities are restored to the same ASPs from which they were saved.
|
|
</dd>
|
|
<dt><b>*SYSBAS</b></dt>
|
|
<dd>The private authorities are restored to the system ASP (ASP number 1) or to the basic user ASPs (ASP numbers 2-32).
|
|
</dd>
|
|
<dt><b><i>name</i></b></dt>
|
|
<dd>Specify the name of the independent ASP device for which to restore the private authorities.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<hr size="2" width="100%">
|
|
<div><h3><a name="RSTAUT.COMMAND.EXAMPLES">Examples</a> </h3>
|
|
<p><b>Example 1: Restore All Authorities</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RSTAUT
|
|
</pre>
|
|
</p>
|
|
<p>This command restores to each user profile the authority to use each object that the profile had at the time when the system was saved. The user profiles and the libraries and their objects must be restored before the RSTAUT command is sent.
|
|
</p>
|
|
<p><b>Example 2: Restore Authorities for Specific Users</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RSTUSRPRF USRPRF(USER1 USER2 USER3 USER4)
|
|
RSTLIB SAVLIB(USERLIB)
|
|
RSTAUT USRPRF(USER1 USER2 USER3)
|
|
</pre>
|
|
</p>
|
|
<p>To each specified user profile that was successfully restored, this command restores the authority to use each object that the profile had at the time the system was saved. The user profiles and the libraries and their objects must be restored before the RSTAUT command is sent. Because USER4 was not specified in the RSTAUT command, its authorities are still available and may be restored at a later date.
|
|
</p>
|
|
<p><b>Example 3: Restore Authorities for Specific Libraries</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RSTUSRPRF USRPRF(*ALL)
|
|
RSTLIB SAVLIB(USERLIBA)
|
|
RSTLIB SAVLIB(USERLIBB)
|
|
RSTLIB SAVLIB(USERLIBC)
|
|
RSTAUT USRPRF(*ALL)
|
|
</pre>
|
|
</p>
|
|
<p>This command restores private authorities for all restored user profiles on the system. This includes authorities for all user profiles restored by the RSTUSRPRF command. Other user profiles on the system that did not have their authorities restored before these commands were specified are also restored by the RSTAUT(*ALL) command.
|
|
</p>
|
|
<p><b>Example 4: Restore Authorities After Multiple RSTUSRPRF Commands</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RSTUSRPRF USRPRF(USER1 USER2)
|
|
RSTLIB SAVLIB(USERLIBA)
|
|
RSTUSRPRF USRPRF(USER1 USER3)
|
|
RSTLIB SAVLIB(USERLIBB)
|
|
RSTAUT USRPRF(*ALL)
|
|
</pre>
|
|
</p>
|
|
<p>This command restores private authorities for USER2 and USER3 and for the most recent version of USER1. Because the user profiles have the same name, the second RSTUSRPRF command overlays the first version of USER1.
|
|
</p>
|
|
<p><b>Example 5: Restore Libraries and Authorities to an Independent ASP</b>
|
|
</p>
|
|
<p>
|
|
<pre>
|
|
RSTUSRPRF USRPRF(*ALL) SAVASPDEV(*SYSBAS)
|
|
RSTLIB SAVLIB(USERLIBA) RSTASPDEV(DIVISION1)
|
|
RSTLIB SAVLIB(USERLIBB) RSTASPDEV(DIVISION1)
|
|
RSTLIB SAVLIB(USERLIBC) RSTASPDEV(DIVISION1)
|
|
RSTAUT USRPRF(*ALL) SAVASPDEV(*SYSBAS)
|
|
RSTASPDEV(DIVISION1)
|
|
</pre>
|
|
</p>
|
|
<p>This example shows a way to move data and authorities to an independent auxiliary storage pool (ASP). The RSTUSRPRF command restores all user profiles and the private authority information saved from the system ASP (ASP number 1) and basic user ASPs (ASP numbers 2-32). The RSTLIB commands restore libraries USERLIBA, USERLIBB, and USERLIBC to the independent ASP named DIVISION1. The RSTAUT command restores authorities saved from the system ASP and basic user ASPs for all user profiles to objects that now exist on the DIVISION1 ASP.
|
|
</p>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
<hr size="2" width="100%">
|
|
<div><h3><a name="RSTAUT.ERROR.MESSAGES">Error messages</a> </h3>
|
|
<p><b><u>*ESCAPE Messages</u></b>
|
|
</p>
|
|
<dl>
|
|
<dt><b>CPF2206</b></dt>
|
|
<dd>User needs authority to do requested function on object.
|
|
</dd>
|
|
<dt><b>CPF222E</b></dt>
|
|
<dd>&1 special authority is required.
|
|
</dd>
|
|
<dt><b>CPF3776</b></dt>
|
|
<dd>Not all user profiles had all authorities restored.
|
|
</dd>
|
|
<dt><b>CPF3785</b></dt>
|
|
<dd>Not all subsystems ended.
|
|
</dd>
|
|
<dt><b>CPF3855</b></dt>
|
|
<dd>RSTAUT not allowed at this time.
|
|
</dd>
|
|
<dt><b>CPF386D</b></dt>
|
|
<dd>Prestart job failed.
|
|
</dd>
|
|
<dt><b>CPF9814</b></dt>
|
|
<dd>Device &1 not found.
|
|
</dd>
|
|
<dt><b>CPF9833</b></dt>
|
|
<dd>*CURASPGRP or *ASPGRPPRI specified and thread has no ASP group.
|
|
</dd>
|
|
<dt><b>CPFB8ED</b></dt>
|
|
<dd>Device description &1 not correct for operation.
|
|
</dd>
|
|
</dl>
|
|
</div>
|
|
<table width="100%">
|
|
<tr><td align="right"><a href="#RSTAUT.Top_Of_Page">Top</a></td></tr>
|
|
</table>
|
|
</body>
|
|
</html>
|