ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzamv_5.4.0.1/rzamvsaverscsecinfo.htm

114 lines
7.1 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Save resource security information" />
<meta name="abstract" content="Resource security, which defines how users can work with objects, consists of different types of information that is stored in several different places:" />
<meta name="description" content="Resource security, which defines how users can work with objects, consists of different types of information that is stored in several different places:" />
<meta name="DC.Relation" scheme="URI" content="rzamvsavesecinfo.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="saverscsecinfo" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Save resource security information</title>
</head>
<body id="saverscsecinfo"><a name="saverscsecinfo"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Save resource security information</h1>
<div><p>Resource security, which defines how users can work with objects,
consists of different types of information that is stored in several different
places: </p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" frame="border" border="1" rules="all"><thead align="left"><tr><th align="center" valign="top" width="23.97959183673469%" id="d0e20">Type of information</th>
<th align="center" valign="top" width="23.97959183673469%" id="d0e22">Where it is stored</th>
<th align="center" valign="top" width="25.765306122448976%" id="d0e24">How it is saved</th>
<th align="center" valign="top" width="26.27551020408163%" id="d0e26">How it is restored</th>
</tr>
</thead>
<tbody><tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Public authority</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">With the object</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVxxx command<sup>1</sup> </td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTxxx command<sup>2</sup> </td>
</tr>
<tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Object auditing value</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">With the object</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVxxx command<sup>1</sup> </td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTxxx command<sup>2</sup> </td>
</tr>
<tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Object ownership</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">With the object</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVxxx command<sup>1</sup> </td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTxxx command<sup>2</sup> </td>
</tr>
<tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Primary group</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">With the object</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVxxx command<sup>1</sup> </td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTxxx command<sup>2</sup> </td>
</tr>
<tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Authorization list</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">QSYS library</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVESYS or SAVSECDTA</td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTUSRPRF, USRPRF (*ALL)</td>
</tr>
<tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Link between object and authorization list</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">With the object</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVxxx command<sup>1</sup> </td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTxxx command<sup>2</sup> </td>
</tr>
<tr><td valign="top" width="23.97959183673469%" headers="d0e20 ">Private authority</td>
<td valign="top" width="23.97959183673469%" headers="d0e22 ">With the user profile</td>
<td valign="top" width="25.765306122448976%" headers="d0e24 ">SAVESYS or SAVSECDTA </td>
<td valign="top" width="26.27551020408163%" headers="d0e26 ">RSTAUT </td>
</tr>
<tr><td colspan="4" valign="top" headers="d0e20 d0e22 d0e24 d0e26 "><dl><dt class="dlterm"><sup>1</sup> </dt>
<dd>You can save most object types by using the SAVOBJ or SAVLIB commands.
Some object types, such as configurations, have a special save command. </dd>
<dt class="dlterm"><sup>2</sup> </dt>
<dd>You can restore most object types by using the RSTOBJ or RSTLIB commands.
Some object types, such as configurations, have a special restore command.</dd>
</dl>
</td>
</tr>
</tbody>
</table>
</div>
<div class="p">When you need to recover an application or your entire system, you need
to plan the steps carefully, including recovery of the authority to objects.
Following are the basic steps necessary to recover the resource security information
for an application: <ol><li> If necessary, restore user profiles, including the profiles which own
the application. You can restore specific profiles or all profiles with the
RSTUSRPRF command. </li>
<li>Restore any authorization lists that are used by the application. You
restore authorization lists when you use RSTUSRPRF USRPRF(*ALL). <div class="note"><span class="notetitle">Note:</span> This
restores all the user profile values, including passwords, from the backup
media. </div>
</li>
<li>Restore the application libraries by using the RSTLIB or RSTOBJ command.
This recovers object ownership, public authority, and the links between objects
and authorization lists. </li>
<li>Restore private authority to objects by using the RSTAUT command. The
RSTAUT command also restores user authorities to authorization lists. You
can restore authority for specific users or all users. </li>
</ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvsavesecinfo.htm" title="This topic presents an overview of how you save and restore security information.">Save security information</a></div>
</div>
</div>
</body>
</html>