Saving security data

 

This information describes the commands that save user profiles, private authorities, authorization lists, and authority holders.

 

SAVSYS or SAVSECDTA command

Use the SAVSYS command or the Save Security Data (SAVSECDTA) command to save the following security data:

• User profiles

• Private authorities

• Authorization lists

• Authority holders

You can use the SAVSYS or SAVESECDTA commands to save private authorities for objects on independent ASPs.

The systen stores additional security data with each object. The system saves this security data when it saves the object, as follows:

• Public authority

• Owner and owner authority

• Primary group and primary group authority

• Authorization list linked to object

To save security data, the command does not require that your system be in a restricted state. However, you cannot delete user profiles while the system saves security data. If you change user profiles or grant authority while you save security data, your saved information may not reflect the changes.

To reduce the size of a large user profile, do one or more of the following:

• Transfer ownership of some objects to another user profile.

• Remove the private authority to some objects for that user profile.

Your system stores authority information for objects in the /QNTC file systems. The information about iSeries™ Integration for Windows^® Server describes how to save security data for Windows Server.

If you use authorization lists to secure objects in library QSYS, you should write a program to produce a file of those objects. Include this file in the save. This is because the association between the object and the authorization list is lost during a restore operation due to QSYS being restored prior to user profiles. Refer to "What You Should Know About Restoring User Profiles" in the Backup and Recovery book for more information.

 

QSRSAVO API

You can use the Save Objects List (QSRSAVO) API to save User Profiles.

 

Parent topic:

Saving system data and related user data

Related reference
Methods for saving security data