ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaha_5.4.0.1/fileauth.htm

82 lines
6.2 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Java file authorities in the integrated file system" />
<meta name="abstract" content="To run or debug a Java program, the class file, JAR file, or ZIP file needs to have read authority (*R). Any directories need read and execute authorities (*RX)." />
<meta name="description" content="To run or debug a Java program, the class file, JAR file, or ZIP file needs to have read authority (*R). Any directories need read and execute authorities (*RX)." />
<meta name="DC.Relation" scheme="URI" content="advtopic.htm" />
<meta name="DC.Relation" scheme="URI" content="clpckdir.htm" />
<meta name="DC.Relation" scheme="URI" content="classifs.htm" />
<meta name="DC.Relation" scheme="URI" content="runbatch.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="fileauth" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Java file authorities in the integrated file system</title>
</head>
<body id="fileauth"><a name="fileauth"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Java file authorities in the integrated file system</h1>
<div><p>To run or debug a Java™ program, the class file, JAR file,
or ZIP file needs to have read authority (*R). Any directories need read and
execute authorities (*RX).</p>
<p>To use the Create Java Program (CRTJVAPGM) command to optimize
a program, the class file, JAR file, or ZIP file must have read authority
(*R), and the directory must have execute authority (*X). If you use a pattern
in the class file name, the directory must have read and execute authority
(*RX).</p>
<p>To delete a Java program by using the Delete Java Program
(DLTJVAPGM) command, you must have read and write authority (*RW) to the class
file, and the directory must have execute authority (*X). If you use a pattern
in the class file name, the directory must have read and execute authority
(*RX).</p>
<p>To display a Java program by using the Display Java Program
(DSPJVAPGM) command, you must have read authority (*R) to the class file,
and the directory must have execute authority (*X).</p>
<div class="note"><span class="notetitle">Note:</span> Files and directories that do not have execute authority (*X) always
appear to have execute authority (*X) to a user with QSECOFR authority. Different
users can get different results in certain situations, even though both users
appear to have the same access to the same files. This is important to know
when running shell scripts using the Qshell Interpreter or java.Runtime.exec().</div>
<p>For example, one user writes a Java program that uses java.Runtime.exec()
to call a shell script, then tests it using a user ID with QSECOFR authority.
If the file mode of the shell script has read and write authority (*RW), the
integrated file system allows the user ID with QSECOFR authority to run it.
However, a non-QSECOFR authority user could try to run the same Java program,
and the integrated file system would tell the java.Runtime.exec() code that
the shell script cannot be run, because *X is missing. In this case, java.Runtime.exec()
throws an input and output exception.</p>
<p>You can also assign authorities to new files created by Java programs
in an integrated file system. By using the os400.file.create.auth <a href="sysprop.htm">system
property</a> for files and os400.dir.create.auth for directories, any combination
of read, write, and execute authorities may be used.</p>
<p>For more information, see the <a href="../apis/pgm1.htm" target="_blank">Program and CL Command APIs</a> or the <a href="../ifs/rzaaxkickoff.htm" target="_blank">Integrated file system</a>.</p>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="advtopic.htm" title="This topic provides instructions on how to run Java in a batch job and describes the Java file authorities required in the integrated file system to display, run, or debug a Java program.">Advanced topics</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="clpckdir.htm" title="Each Java class is part of a package. The first statement in a Java source file indicates which class is in what package. If the source file does not contain a package statement, the class is part of an unnamed default package.">Java classes, packages, and directories</a></div>
<div><a href="classifs.htm" title="The integrated file system stores Java-related class, source, ZIP, and JAR files in a hierarchical file structure. IBM Developer Kit for Java supports using the threadsafe file systems in the integrated file system to store and work with your Java-related class files, source files, ZIP files, and JAR files.">Files in the integrated file system</a></div>
</div>
<div class="reltasks"><strong>Related tasks</strong><br />
<div><a href="runbatch.htm" title="Java programs run in a batch job by using the Submit Job (SBMJOB) command. In this mode, the Java Qshell Command Entry display is not available to handle the System.in, System.out, nor System.err streams.">Run Java in a batch job</a></div>
</div>
</div>
</body>
</html>