Using authorities required for optical functions

 

This topic describes the various levels of user authority and the types of access associated with them.

You must have *USE authority to an optical volume to use the following optical functions:

• Open file for read

• Open directory

• Retrieve file or directory attributes

• Read sector

• List paths or files

• Check optical volume for damaged files

You must have *CHANGE authority to an optical volume to use the following optical functions:

• Open for write or read write

• Create or delete directory

• Create, delete, or rename file

• Change file or directory attributes

• Save or release held optical file

You must have *ALL authority to an optical volume to use the following optical functions:

• Initialize volume (requires *CHANGE for DVD-RAM media)

• Rename volume (requires *CHANGE for DVD-RAM media)

• Convert backup volume to primary

• Duplicate optical volume (requires *CHANGE for DVD-RAM media)

You must have *USE authority to the source optical volume and *CHANGE authority to the target optical volume to use the following optical functions:

• Copy file

• Copy directory

You must have *CHANGE authority to the source optical volume and *CHANGE authority to the target optical volume to use the move file function:

You must have *AUTLMGT authority to an optical volume to use the following optical functions:

• Change authorization list used to secure the volume

• Add optical cartridge (if overriding an existing authorization list)

You must have *OBJEXIST authority to the source volume to use save optical volume optical function.

You must have *OBJEXIST authority to the target volume to use the restore optical volume function.

All programs are shipped with PUBLIC(*EXCLUDE) authority, and most of the commands are shipped with PUBLIC(*USE) authority. The following commands are shipped with PUBLIC(*EXCLUDE) authority.

• Add Optical Cartridge (ADDOPTCTG)

• Remove Optical Cartridge (RMVOPTCTG)

• Add Optical Server (ADDOPTSVR)

• Remove Optical Server (RMVOPTSVR)

• Reclaim Optical (RCLOPT)

• Change Optical Attributes (CHGOPTA)

 

Parent topic:

Managing optical security and auditing