|
You cannot circumvent object authority. Regardless of the interface used to access an object (in this case data in a file), object authority is always in effect -- it is checked by SLIC (system licensed internal code.)
The only way users would be able to circumvent the object authority is if they have *ALLOBJ special authority or if they are able to gain more authority than they currently have. For example, a user would be able to gain more authority by calling a program that adopts a powerful user such as QSECOFR and puts up a command, or if they had *USE authority to a powerful profile and could swap to it. Default authority to user profiles is *PUBLIC *EXCLUDE so this would have had to been a conscious choice to open up access to the profile.
In addition, you have to have *ALLOBJ authority yourself to be able to create a program that adopts QSECOFR or some other *ALLOBJ profile.
|
