Grant Workstation Object Aut (GRTWSOAUT)
| Where allowed to run: All environments (*ALL) Threadsafe: No |
Parameters Examples Error messages |
The Grant Workstation Object Authority (GRTWSOAUT) command is used by one user to grant specific authority for the workstation object named in this command to another user or group of users. Workstation objects are used by the IBM i Graphical Operations program.
Authority can be given to:
- Named users.
- Users (*PUBLIC) who do not have authority specifically given to them either for the object or for the authorization list.
- Groups of users who do not have any authority to the object or are not on the authorization list that secures the object.
- Users of the referenced workstation object (specified on the REFWSO parameter).
- Users on an established authorization list.
When AUT(*AUTL) is specified, the user can The authority for:
- All users who do not have authority specifically given to them for an object.
- Users who are not on the authorization list that secures the object.
- Users whose user group does not have authority specifically given to it.
- Users whose user group is not on the authorization list that secures the object.
This command can be used by an object owner, by the security officer, or by a user with object management authority for the specified object.
Restrictions:
- A user must be either the owner of the object or have *ALL authority to use the AUTL parameter.
- The user must have object management authority to the object to grant authority to the object.
- AUT(*AUTL) can be specified only with USER(*PUBLIC). User profile names cannot be secured by an authorization list (*AUTL).
- Only the owner of the object, or someone with all object authority (*ALLOBJ), can grant object management authority to a user.
| Top |
Parameters
| Keyword | Description | Choices | Notes |
|---|---|---|---|
| WSOTYPE | Workstation object type | Element list | Required, Positional 1 |
| Element 1: | *TPLWRKARA, *WRKARA, *TPLPRTOL, *PRTOL, *TPLPRTL, *PRTL, *TPLOUTQ, *TPLOUTQL, *OUTQL, *TPLJOBL, *JOBL, *TPLJOBQ, *TPLJOBLOG, *JOBLOG, *TPLJOBQL, *JOBQL, *TPLMSGL, *MSGL, *TPLMSGQ, *TPLMSGSND, *MSGSND, *TPLSGNUSL, *SGNUSL, *TPLOBJL, *OBJL, *TPLLIBSL, *LIBSL, *TPLLIB, *LAUNCH, *TPLLAUNCH, *PRSSET | ||
| USER | Users | Single values: *PUBLIC Other values (up to 50 repetitions): Qualifier list |
Optional, Positional 2 |
| Qualifier 1: Users | Name | ||
| AUT | Authority | Single values: *CHANGE, *ALL, *USE, *EXCLUDE, *AUTL Other values (up to 7 repetitions): *OBJEXIST, *OBJMGT, *OBJOPR, *ADD, *DLT, *READ, *UPD |
Optional, Positional 3 |
| AUTL | Authorization list | Name | Optional |
| REFWSO | Reference workstation object | Element list | Optional |
| Element 1: | *TPLWRKARA, *WRKARA, *TPLPRTOL, *PRTOL, *TPLPRTL, *PRTL, *TPLOUTQ, *TPLOUTQL, *OUTQL, *TPLJOBL, *JOBL, *TPLJOBQ, *TPLJOBLOG, *JOBLOG, *TPLJOBQL, *JOBQL, *TPLMSGL, *MSGL, *TPLMSGQ, *TPLMSGSND, *MSGSND, *TPLSGNUSL, *SGNUSL, *TPLOBJL, *OBJL, *TPLLIBSL, *LIBSL, *TPLLIB, *LAUNCH, *TPLLAUNCH, *PRSSET |
| Top |
Workstation object type (WSOTYPE)
Specifies the workstation objects whose authority is to be editted.
This is a required parameter.
- *TPLWRKARA
- The work area template is the workstation object.
- *WRKARA
- The work area objects are the workstation objects.
- *TPLPRTOL
- The printer output list template is the workstation object.
- *PRTOL
- The printer output list objects are the workstation objects.
- *TPLPRTL
- The printer list template is the workstation object.
- *PRTL
- The printer list objects are the workstation objects.
- *TPLOUTQ
- The output queue template is the workstation object.
- *TPLOUTQL
- The output queue list template is the workstation object.
- *OUTQL
- The output queue list objects are the workstation objects.
- *TPLJOBL
- The job list template is the workstation object.
- *JOBL
- The job list objects are the workstation objects.
- *TPLJOBQ
- The job queue template is the workstation object.
- *TPLJOBLOG
- The job log template is the workstation object.
- *JOBLOG
- The job log objects are the workstation objects.
- *TPLJOBQL
- The job queue list template is the workstation object.
- *JOBQL
- The job queue list objects are the workstation objects.
- *TPLMSGL
- The message list template is the workstation object.
- *MSGL
- The message list objects are the workstation objects.
- *TPLMSGQ
- The message queue template is the workstation object.
- *TPLMSGSND
- The message sender template is the workstation object.
- *MSGSND
- The message sender objects are the workstation objects.
- *TPLSGNUSL
- The signed-on user list template is the workstation object.
- *SGNUSL
- The signed-on user list objects are the workstation objects.
- *TPLOBJL
- The object list template is the workstation object.
- *OBJL
- The object list objects are the workstation objects.
- *TPLLIBSL
- The library list template is the workstation object.
- *LIBSL
- The library list objects are the workstation objects.
- *TPLLIB
- The library template is the workstation object.
- *TPLLAUNCH
- The job submitter template is the workstation object.
- *LAUNCH
- The job submitter objects are the workstation objects.
- *PRSSET
- The personal settings objects are the workstation objects.
| Top |
Users (USER)
Specifies one or more users to whom authorities for the named object are to be given. If user names are specified, the authorities are given specifically to those users. Authority given by this command can be revoked specifically by the Revoke Workstation Object Authority (RVKWSOAUT) command.
This is a required parameter unless either the Reference workstation object (REFWSO) parameter or Authorization list (AUTL) parameter is specified.
- *PUBLIC
- All users of the system, who do not have authority specifically given to them for the object, who are not on the authorization list, whose user group does not have any authority, or whose user group is not on the authorization list, are authorized to use the object as specified on the AUT parameter.
- name
- Specify the name of one or more user profiles. A maximum of 50 user profile names can be specified.
| Top |
Authority (AUT)
Specifies the authority to be given to the users specified on the Users (USER) parameter.
Single values
- *CHANGE
- The user can perform all operations on the object except those limited to the owner or controlled by object existence (*OBJEXIST) and object management (*OBJMGT) authorities. The user can change and perform basic functions on the object. *CHANGE authority provides object operational (*OBJOPR) authority and all data authority. If the object is an authorization list, the user cannot add, change, or remove users.
- *ALL
- The user can perform all operations except those limited to the owner or controlled by authorization list management (*AUTLMGT) authority. The user can control the object's existence, specify the security for the object, change the object, and perform basic functions on the object. The user also can change ownership of the object.
- *USE
- The user can perform basic operations on the object, such as running a program or reading a file. The user cannot change the object. Use (*USE) authority provides object operational (*OBJOPR), read (*READ), and execute (*EXECUTE) authorities.
- *EXCLUDE
- The user cannot access the workstation object.
- *AUTL
- The public authority of the authorization list specified on the AUTL parameter is used for the public authority for the object.
Note: You can specify AUT(*AUTL) only when USER(*PUBLIC) is also specified.
Other values (up to 10 repetitions)
- *OBJALTER
- Object alter authority provides the authority needed to alter the attributes of an object. If the user has this authority on a database file, the user can add and remove triggers, add and remove referential and unique constraints, and change the attributes of the database file. If the user has this authority on an SQL package, the user can change the attributes of the SQL package. This authority is currently only used for database files and SQL packages.
- *OBJMGT
- Object management authority provides the authority to The security for the object, move or rename the object, and add members to database files.
- *OBJEXIST
- Object existence authority provides the authority to control the object's existence and ownership. If a user has special save system authority (*SAVSYS), object existence authority is not needed to perform save restore operations on the object.
- *OBJOPR
- Object operational authority provides authority to look at the description of an object and use the object as determined by the data authority that the user has to the object.
- *OBJREF
- Object reference authority provides the authority needed to reference an object from another object such that operations on that object may be restricted by the other object. If the user has this authority on a physical file, the user can add referential constraints in which the physical file is the parent. This authority is currently only used for database files.
Data authorities
- *ADD
- Add authority provides the authority to add entries to an object (for example, job entries to an queue or records to a file).
- *DLT
- Delete authority provides the authority to remove entries from an object.
- *EXECUTE
- Execute authority provides the authority needed to run a program or locate an object in a library.
- *READ
- Read authority provides the authority needed to get the contents of an entry in an object or to run a program.
- *UPD
- Update authority provides the authority to change the entries in an object.
| Top |
Authorization list (AUTL)
Specifies the authorization list whose members are to be given authority for the object specified for the Workstation object type (WSOTYPE) parameter. You must have authorization list management (*AUTLMGT) authority for the specified authorization list.
This is a required parameter unless either the Users (USER) parameter or the Reference workstation object (REFWSO) parameter is specified.
| Top |
Reference workstation object (REFWSO)
Specifies the workstation object referred to for authorizations. These authorizations are given to the object specified for the Workstation object type (WSOTYPE) parameter. Users authorized to the reference object are authorized in the same manner to the object for which authority is to be given. If the reference object is secured by an authorization list, that authorization list secures the object specified on the WSOTYPE parameter.
This is a required parameter unless either the Users (USER) parameter or the Authorization list (AUTL) parameter is specified.
| Top |
Examples
GRTWSOAUT WSOTYPE(*TPLWRKARA) AUTL(KLIST)
This command gives authority to the work are template to the users with authority specified for them on the authorization list KLIST.
| Top |
Error messages
Unknown| Top |