Restricting read/write operations to files

Display File Description DSPFD shows:  
Allow read operation  . . . . . . . . . . . :            Yes    
Allow write operation . . . . . . . . . . . :            Yes    
Allow update operation  . . . . . . . . . . : ALWUPD     *NO    
Allow delete operation  . . . . . . . . . . : ALWDLT     *NO    

The last two parameters area set using Create Physical File CRTPF; how are the first two set?

Barry
LVL 13
Barry HarperConsultantAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

daveslaterCommented:
read / write are file fundamentals - it is what files are for hence will always be there.
a write operation will be disabled on a join logical as will update and delete.
a read operation I have no idea!

Dave
Gary PattersonVP Technology / Senior Consultant Commented:
You need to use object authority if you want to limit the users who can read or write a file.

Use DSPOBJAUT and EDTOBJAUT commands to view view and edit authorities for a single object.
Use GRTOBJAUT to set authorities for a group of objects.

Note that just like in Windows, it is the best practice to set up group profile, assign users to member of groups, and assign object rights to group profiles.  If you have a large number of objects that all require identical settings, you would create an authorization list (CRTAUTL), assign rights to each group, and then attach that authorization list to each object.

The Security Reference for your OS version explains IBM i security in detail.  Search "IBM i Security Reference VxRy", where x and y are the version and release that you are running.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
IBM System i

From novice to tech pro — start learning today.