Authority to user profile

[versa005]

Hi All,

I need to create a user profile in AS400 and that profile should be able to access only the objects present in LIB1 library. If the user try to access any other library other than LIB1, it should not allow. How to achieve this? Please help.

Regards
Regu

[gcraill]

Re: Authority to user profile

The user will probably have to have authority to other libraries such as those in the system portion of the library list.

I would suggest not touching the authority on any IBM supplied library.

You could create an authorisation list, or a user group for this type of restricted user.

Then set the authorities on all user libraries to *EXCLUDE the users in that *AUTL or user group.

Then set the authority to *CHANGE/*USE or *ALL for LIB1.

Also as new libraries are created they will need to have an authority on them of *EXCLUDE for that type of restricted user maybe to make sure that the user stays restricted.

[versa005]

Re: Authority to user profile

Hi, Thanks for your reply. Do u mean that providing limited access to the user is not possible directly?

[gcraill]

Re: Authority to user profile

Probably not, I am guessing if library GEORGELIB had authority of PUBLIC(*ALL) then the user would have access to it.

If the user does not have command line access, then you can control them by providing a menu that restricts their actions.

Check with your security officer