|
Not necessary - to get to the objects within a library (or a directory)
you have to have authority to the library (or directory) itself. So if
*PUBLIC authority to the authorization list is *EXCLUDE or various users
or groups have been given *EXCLUDE authority to the authorization list
and the authorization list secures the library, then they will not be
able to get to the objects within the library. You should be able to
easily prove this for yourself. Create a user that looks like a user
that shouldn't be getting at those objects. Try to perform some
operation on one of those files - open it or display its authority. If
the authorities are set up as you have indicated, you should receive a
"not authorized" message. ==================================
MORE INFORMATION ON THIS TOPIC
==================================
The Best Web Links: Tips, tutorials and more.
Search400.com's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Read this Search400.com Featured Topic: Secure your iSeries
|
