RVKPUBAUT (Revoke Public Authority)

RVKPUBAUT Command syntax diagram

 

Purpose

The Revoke Public Authority (RVKPUBAUT) command limits the use of a set of IBM-supplied commands and programs by changing the public authority to *EXCLUDE.

This command can be customized by the security administrator by following the steps below:

1. Issue the Retrieve CL Source (RTVCLSRC) command against the QSECRVKP program.
2. Edit the source code produced from the RTVCLSRC command and compile the new program. Make sure that the program is given a new name, is created into a library other than QSYS, and that the *PUBLIC authority is set to *EXCLUDE.
3. Issue the Change Command (CHGCMD) against the Revoke ublic Authority (RVKPUBAUT) command and specify your new program for the PGM parameter. An example is listed below.

   CHGCMD   CMD(QSYS/RVKPUBAUT)
     PGM(library-name/new-pgm-name)
   

   Note:

   If a product upgrade is done, if the RVKPUBAUT command is reinstalled, or if maintenance is applied to the RVKPUBAUT command, the CHGCMD will have to be issued again to customize the command.

 

Restrictions

You must have *ALLOBJ special authority to use this command.

 

Optional Parameters

LIB

Specifies the name of the library where the IBM supplied commands are to be found.

Note:

The library value is only used for commands because they can be located in secondary language libraries.

QSYS: Specifies the commands are located in library QSYS.

library-name: Specify the library where the commands are located.

Example for RVKPUBAUT

RVKPUBAUT   LIB(QSYS)

The public authority for commands and programs in library QSYS is set to *EXCLUDE.

Error messages for RVKPUBAUT

*ESCAPE Messages

CPFB304

User does not have required special authorities.