DSPOBJAUT (Display Object Authority) Command Description

DSPOBJAUT Command syntax diagram

Purpose

The Display Object Authority (DSPOBJAUT) command shows the list of authorized users of an object and their authorities for the object. If the object is secured by an authorization list, the name of the authorization list is also shown.

The following are shown for the specified object:

If the user entering the command does not have object management authority for the object, only that user's name and authorities are shown. The names of the other users and their authorities for the object are not shown. If an object does not have an owner name associated with it, no authorities for the object are shown.

You must have *USE authority to the auxiliary storage pool device if one is specified.>

Required Parameters

OBJ
Specifies the qualified name of the object for which the authorized users and their authorities are displayed.

The name of the object can be qualified by one of the following library values:

*LIBL: All libraries in the job's library list are searched until the first match is found.

*CURLIB: The current library for the job is searched. If no library is specified as the current library for the job, the QGPL library is used.

library-name: Specify the name of the library to be searched.

object-name: Specify the name of the object.

OBJTYPE
Specifies the type of object that has its authorized users and authorities shown. Any one of the object types can be specified. For example, to display a list of users authorized to use a file, specify the value *FILE. More information on this parameter is in commonly used parameters.

Optional Parameters

OUTPUT
Specifies whether the output from the command is shown at the requesting work station, printed with the job's spooled output, or directed to a database file.

More information on this parameter is in commonly used parameters.

*: Output requested by an interactive job is shown on the display. Output requested by a batch job is printed with the job's spooled output.

*PRINT: The output is printed with the job's spooled output.

*OUTFILE: The output is directed to the database file specified on the OUTFILE parameter.

OUTFILE
Specifies the name of the database file to which the output of the display is directed. If the output file does not exist, this command creates a database file in the specified library. If the file is created by this function, the text is 'OUTFILE created by DSPOBJAUT'. The public authority is *EXCLUDE. The database format (QSYDSAUT) of the output file is the same as that used in the IBM-supplied database file QAOBJAUT.

The name of the database file can be qualified by one of the following library values:

*LIBL: All libraries in the job's library list are searched until the first match is found.

*CURLIB: The current library for the job is searched. If no library is specified as the current library for the job, the QGPL library is used.

library-name: Specify the name of the library to be searched.

database-file-name: Specify the name of the database file to which the output is directed.

OUTMBR
Specifies the name of the database file member to which the output is directed.

Element 1: Member to Receive Output

*FIRST: The first member in the file receives the output. If OUTMBR(*FIRST) is specified and the member does not exist, the system creates a member with the name of the file specified on the OUTFILE parameter.

member-name: Specify the file member that receives the output. If OUTMBR(member-name) is specified and the member does not exist, the system creates it.

Element 2: Operation to Perform on Member

*REPLACE: The system clears the existing member and adds the new records.

*ADD: The system adds the new records to the end of the existing records.

AUTTYPE
Specifies whether object level authority, field level authority, or both object level and field level authority are displayed. Field level authority information only applies to *FILE objects.

*OBJECT: The object level authority information is displayed, placed in a spooled file, or placed in an outfile.

If OUTPUT(*) is requested and the object is a file with field level authorities, the F16 key, Display Field Authorities, will be enabled on the display.

*FIELD: The field level authority information is displayed, placed in a spooled file, or placed in an outfile.

This value is only valid if *FILE is specified for the Object type prompt (OBJTYPE parameter).

*ALL: If OUTPUT(*) is requested, the object level authority information is displayed. If there are field level authorities associated with the file, the F16 key, Display Field Authorities, will be enabled on the display. If OUTPUT(*PRINT) is requested, the object level and field level authority data are included in the spooled file. AUTTYPE(*ALL) is not valid with OUTPUT(*OUTFILE).

This value is only valid if *FILE is specified for the Object type prompt (OBJTYPE parameter).

ASPDEV
Specifies the auxiliary storage pool (ASP) device name where the library that contains the object (OBJ parameter) is located. If the object's library resides in an ASP that is not part of the library name space associated with the job, this parameter must be specified to ensure the correct object is used as the target of the display operation.

*: The ASPs that are currently part of the job's library name space will be searched to locate the object. This includes the system ASP (ASP number 1), all defined basic user ASPs (ASP numbers 2-32), and, if the job has an ASP group, all independent ASPs in the ASP group.

*SYSBAS: The system ASP and all basic user ASPs will be searched to locate the object. No independent ASPs will be searched, even if the job has an ASP group.

auxiliary-storage-pool-device-name: The device name of the independent ASP to be searched to locate the object. The independent ASP must have been activated (by varying on the ASP device) and have a status of 'Available'. The system ASP and basic user ASPs will not be searched.>

Examples for DSPOBJAUT

Example 1: Displaying Users and Authorities 

DSPOBJAUT   OBJ(ARLIB/PROG1)  OBJTYPE(*PGM)

This command shows the authorized users and their authorities for the object named PROG1 to the user who entered the command, if that user has object management authority for the object. If the user does not have object management authority, only personal authorities are shown. PROG1 is a program (*PGM) located in the library named ARLIB. The system assumes * for the device that shows the output list. If the command was entered in the batch subsystem, the output is placed in the default output queue for the job. If the command was entered in the interactive subsystem, the output is shown on the device where the user entered the command.

Example 2: Printing List of Users 

DSPOBJAUT   OBJ(ARLIB/PROG2)  OBJTYPE(*PGM)
    OUTPUT(*PRINT)

This command causes the list of authorized users of the program named PROG2 in the ARLIB library to be printed. If the user who enters the command does not have object management authority for the program, only that user's name and authorities are printed.

Error messages for DSPOBJAUT

*ESCAPE Messages

CPF2204
User profile &1 not found.
CPF2207
Not authorized to use object &1 in library &3 type *&2.
CPF2208
Object &1 in library &3 type *&2 not found.
CPF2209
Library &1 not found.
CPF2211
Not able to allocate object &1 in &3 type *&2.
CPF2216
Not authorized to use library &1.
CPF224E
The AUTTYPE value of *FIELD is not valid for file &1 in library &2.
CPF2283
Authorization list &1 does not exist.
CPF980B
Object &1 in library &2 not available.
CPF9814
Device &1 not found.
CPF9825
Not authorized to device &1.>
CPF9843
Object &1 in library &3 type &2 cannot be accessed.
CPF9860
Error occurred during output file processing.
CPF9873
ASP status is preventing access to object.>