AUTHORITIES

AUTHORITIES: Authority is nothing but giving permission to perform   certain task.

There are two types of AUTHORITIES

   

                                 1.PRIVATE      2. PUBLIC

PRIVATE authorities are again divided in to two types

  1. SPECIAL

   2. SPICIFIC

PUBLIC authority is the default authority for an object. It is used if   users do not have any specific object to an authority.   

                                SPECAIL AUTHORITIES

•There are  8 special authorities. These allows certain users to administrate AS400 security and system tasks. Those 8 are:-

         *ALLOBJ (All object authority is granted for accessing any system resource)

         *AUDIT (This allows user to perform auditing functions)

         *JOBCTL (Allows manipulation of jobs and its O/P)

         *SAVSYS (it is used to save and restore the system)

         *SECADM (it allows user to administrate user profiles.

         *SERVICE (Allows to access special service functions for        problem diagnosis.)          

         *SPLCTL (This allows user to perform all control on spool                       files)

         *IOSYSCFG (Allows to change system configuration )

                          SPECIFIC AUTHORITIES

•SPECIFIC AUTHORITIES are of two types.

            1. OBJECT AUTHORITY

            2. DATA AUTHROITY

 1. OBJECT AUTHORITY : There are six object authority

             *OBJOPR (with this authority a user can control the      use of an OBJECT and can look the   description of OBJECT).

            *OBJMGT (With this the user can manage an   object like he can change the location,   rename the object).

           *OBJEXIST (With this the user can   delete, save, restore an object).

           *AUTLMGT (With this the user can   manage contents of Authorization list).

           *OBJALTER  ( A user can alter the attributes of DB   files).

           *OBJREF  (A user can specify a db file).

2.DATA AUTHORITY: There are 5 data authority

             *READ  (To read the data from object)

             *ADD    (To add the data in to object)

             *DELETE   (To delete the data or existing entries)

             *UPDATE  (To update or modify existing entries)

             *EXECUTE (It controls the ability to run a program and   to locate an object in a library or a   directory)