Editing Authority to Access Data Areas

Using Your Development Environment › Controlling User Access › Editing Authority to Access Data Areas

Editing Authority to Access Data Areas

When a user attempts to access a model,CA 2E checks to ensure the user has the authority to access data areas YMDLLIBRFA and YGENLIBRFA with the specified user type before allowing access to the model.

Designer User Type—To allow a user access to a model as a designer, grant at least CHANGE and OBJMGT authority. To allow the designer to lock and unlock objects, grant ALL authority. For example:

EDTOBJAUT  OBJ(MYMDL/YMDLLIBRFA) + OBJTYPE(*DTAARA)

Press Enter and F11. Update the panel that displays by assigning authorities to the appropriate user as follows:

For a designer without lock authority, enter *CHANGE in the Object Authority column and X in the Mgt column.
For a designer with lock authority, enter *ALL in the Object Authority column. For example:

EDTOBJAUT OBJ(MYMDL/YMDLLIBRFA) OBJTYPE(*DTAARA)

Press Enter. Update the panel that displays by assigning *CHANGE authority. For example:

EDTOBJAUT  OBJ(MYMDL/YMDLLIBRFA) OBJTYPE(*DTAARA)

Press Enter. Update the panel that displays by assigning *USE authority.

The following illustration shows the authorities needed to the YMDLLIBRFA data area to access a model:

User JXY has designer with lock access.
User DSH has designer access.
User OPK has programmer access.
User RMG has user access.

Edit Object Authority Object . . . . . . . : YMDLLIBRFA Owner . . . . . . . : DEV Library. . . . . . : MYMDL Primary group. . . . : *NONE Object type. . . . . : *DTAARA Type changes to current authorities, press Enter. Object secured by authorization list . . . . . . . . . . . . *NONE Object ----------Object----------- User Group Authority Opr Mgt Exist Alter Ref QSYS *ALL_____ X X X X X *GROUP DEV *ALL_____ X X X X X RMG *USE_____ X _ _ _ _ OPK *CHANGE__ _ _ _ _ _ DSH *USER DEF _ X _ _ _ JXY *ALL_____ X X X X X Bottom F3=Exit F5=Refresh F6=Add new users F10=Grant with reference object F11=Display data authorities F12=Cancel F17=Top F18=Bottom Object authorities changed.

Edit Object Authority Object . . . . . . . : YMDLLIBRFA Owner . . . . . . . : DEV Library. . . . . . : MYMDL Primary group. . . . : *NONE Object type. . . . . : *DTAARA Type changes to current authorities, press Enter. Object secured by authorization list . . . . . . . . . . . . *NONE Object ----------Object----------- User Group Authority Opr Mgt Exist Alter Ref QSYS *ALL_____ X X X X X *GROUP DEV *ALL_____ X X X X X RMG *USE_____ X _ _ _ X OPK *CHANGE__ X X X X X DSH *USER DEF _ X _ _ _ JXY *ALL_____ X X X X X F3=Exit F5=Refresh F6=Add new users F10=Grant with reference object F11=Nondisplay detail F12=Cancel F17=Top F18=Bottom

Both designers and programmers must have *ALL authority to access YGENLIBRFA. For example:

GRTOBJAUT  OBJ(MYMDL/YGENLIBRFA) + OBJTYPE(*DTAARA)  USER(BERT)  AUT(*ALL)

You can grant *USE authority to those users who need to view, but not update, generated source. For example:

GRTOBJAUT  OBJ(MYMDL/YGENLIBRFA) + OBJTYPE(*DTAARA)  USER(USER)  AUT(*USE)

The following illustration shows the authorities needed to the YGENLIBRFA data area to access a generation library:

User JXY and DSH have designer access.
User OPK has programmer access.
User RMG has user access.

Edit Object Authority Object . . . . . . . . : YGENLIBRFA Owner . . . . . . . : DEV Library. . . . . . . : MYMDL Primary group . . . : *NONE Object type. . . . . . : *DTAARA Type changes to current authorities, press Enter. Object secured by authorization list. . . . . . . . . . . . : *NONE Object ----------Object----------- User Group Authority Opr Mgt Exist Alter Ref QSYS *ALL_____ X X X X X OPK *ALL_____ X X X X X DSH *ALL_____ X X X X X RMG *USE_____ X _ _ _ _ JXY *ALL_____ X X X X X *GROUP DEV *ALL_____ X X X X X *PUBLIC *EXCLUDE_ _ _ _ _ _ Bottom F3=Exit F5=Refresh F6=Add new users F10=Grant with reference object F11=Display data authorities F12=Cancel F17=Top F18=Bottom

Edit Object Authority Object . . . . . . . . : YGENLIBRFA Owner . . . . . . . : DEV Library. . . . . . . : MYMDL Primary group . . . : *NONE Object type. . . . . . : *DTAARA Type changes to current authorities, press Enter. Object secured by authorization list. . . . . . . . . . . . : *NONE Object ---------------Data--------------- User Group Authority Read Add Update Delete Execute QSYS *ALL_____ X X X X X OPK *ALL_____ X X X X X DSH *ALL_____ X X X X X RMG *USE_____ X _ _ _ _ JXY *ALL_____ X X X X X *GROUP DEV *ALL_____ X X X X X *PUBLIC *EXCLUDE_ _ _ _ _ _ Bottom F3=Exit F5=Refresh F6=Add new users F10=Grant with reference F11=Nondisplay detail F12=Cancel F17=Top F18=Bottom

If you want to grant authority for many users to use YGENLIBRFA, you can set the USER parameter to *PUBLIC rather than granting separate authorities to each user.