How can I change the permissions for all the folders nested in a top level folder in the IFS? When I try changing the permissions in the top level folder using Operations Navigator, only that folder changes, and not all the folders nested below it. Surely there is a way to do this within the OpsNav interface. I'm sure there's a way to do this from a green-screen command line, but I can't remember the command.
To change all of the permissions within a folder you can use the CHGAUT command and use generics. In fact, this is a handy way to change the authority of all objects in a library as well as a directory. As in:
CHGAUT OBJ('/QSYS.LIB/APP_LIB.LIB/*.*') DTAAUT(*RX) OBJAUT(*NONE)
However, if you try this with a directory and there are sub-directories, it will only change the authority of the sub-directory itself and not the objects within the sub-directory. There are a set of free -- but unsupported -- tools that are available from IBM - one of which changes the authority of all objects below the directory that you specify. See the Security Patrol article .RuQkarY0aEB.1@.6ae64331!sectionID=. 5bfbaeb9>here for details about these tools.
MORE INFORMATION ON THIS TOPIC
The Best Web Links: tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Dig Deeper on iSeries physical security
Related Q&A from Carol Woodbury
Before changing password levels and upgrading operating systems on the AS/400, ensure the clients connecting to the NetServer do not need the old ... Continue Reading
Look in the audit journal (QAUDJRN) on the AS/400 for an authority failure message with the name of the library as the object name. Use the ... Continue Reading
When error messages arise concerning attempts to use a permanent system object without authority, find the source of the issue by looking for an AF ... Continue Reading