Measuring *PUBLIC before restricting it
QCRTAUT defaults to *CHANGE, so public authority is wider than anyone decided. How to measure it with SQL before restricting it.
QCRTAUT defaults to *CHANGE, so public authority is wider than anyone decided. How to measure it with SQL before restricting it.
Many installations run on users who hold *ALLOBJ because "otherwise it does not work". How you end up there, and how to get out without stopping anybody's work.
Special authorities, object authorities, groups, lists and adopted authority, the QSECURITY levels. With the queries to see who can do what.