Allow a user to view a library prod without granting full access to all data
Implement the *USE command to provide user access via the view to the library, withholding the user from *OBJOPR object authority. This prevents the user from gaining access to the physical file.
In order to implement security, I created a view F4211 in another library staging in the following way:
Continue Reading This Article
Enjoy this article as well as all of our content, including E-Guides, news, tips and more.
CREATE VIEW STAGING.F4211 AS SELECT * FROM PROD.F4211 WHERE SDKCOO='12345'
I granted access to a user for this view but the user says he is facing problems with the privilege error when he attempts to access the view.
Could you please let me know if I need to grant access to F4211 in prod library also? However, if I do that there will be a loophole, as the user will be able to access all data.
One last thing to mention is that the user does not have any privileges on prod library. I would like to fix this user's problem with the priviledge error without enabling this user to access all data.
As long as you do not give the user *OBJOPR object authority to the physical file, they will only be able to access the data via the view. If the user attempts to get the data from the physical file, it will fail.
Dig Deeper on iSeries system and application security
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.
Meet all of our AS/400 experts
View all AS/400 questions and answers
Start the conversation
0 comments