Installation and Upgrade Guide

10.5.8
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0 HotFix 1
- 10.4.0

Back Next

Step 7. Configure PowerExchange User Authority

Configure security options for the PowerExchange Listener and user.

If you want to run the PowerExchange Listener interactively, ensure that the library list for the current job includes the PowerExchange software library (dtllib) and data library (datalib) before running the commands that are shown in this topic.

If you want the PowerExchange Listener to use the user ID and passwords supplied from the remote platform for security, change the first parameter in the SECURITY statement in the DBMOVER configuration file to a nonzero value.

Before running jobs, ensure that the PowerExchange user ID (pwxusr) has *EXECUTE authority for the following objects:

QSYGETPH

QSYRLSPH

QWTSETP

QCLRPGMI

To grant EXECUTE authority on these objects, run the following commands:

GRTOBJAUT OBJ(QSYGETPH) OBJTYPE(*PGM) AUT(*EXECUTE) USER(pwxusr)
GRTOBJAUT OBJ(QSYRLSPH) OBJTYPE(*PGM) AUT(*EXECUTE) USER(pwxusr)
GRTOBJAUT OBJ(QWTSETP) OBJTYPE(*PGM) AUT(*EXECUTE) USER(pwxusr)
GRTOBJAUT OBJ(QCLRPGMI) OBJTYPE(*PGM) AUT(*EXECUTE *READ) USER(pwxusr)

Also, to run the PowerExchange Listener, the user ID must have *READ authority for all of the user profiles. To grant *READ authority, run the following command:

GRTOBJAUT OBJ(remote_id) OBJTYPE(*USRPRF) AUT(*READ) USER(pwxusr)

For PowerExchange to run IBM i operating system commands that provide required functionality, the user ID that is used to run the PowerExchange Listener, and any user ID that is specified from client connections to the PowerExchange Listener, must have the authority required to run these commands. PowerExchange uses the user ID that is used to run the PowerExchange Listener, and any user ID that is specified from client connections made to the PowerExchange Listener, must have the required authority for these commands. PowerExchange uses the following IBM i OS commands:

ALCOBJ

ADDLIBLE

ADDPFM

CHGCURLIB

CHGQRYA

CHKOBJ

CRTDDMF

CRTMSGQ

CRTPF

CRTSRCPF

DLCOBJ

DLTF

DLTMSGQ

DLTOVR

DLYJOB

OVRDBF

OVRMSGF

OVRPRTF

RMVLIBLE

RMVM

SETASPGRP

SNDMSG

The level of authority required for each user for the listed commands is *USE. IBM i permits you to grant this authority through various methods such as: individual user profiles, group profiles, authorization lists, and *PUBLIC authority. Choose the policy that your organization implements. The following is a sample command for user JOEBLOGGS for one of the commands:

GRTOBJAUT OBJ(*LIBL/CRTPF) OBJTYPE(*CMD) USER(JOEBLOGGS) AUT(*USE) REPLACE(*NO)

Rename Saved Search

Table of Contents

Installation and Upgrade Guide

Installation and Upgrade Guide

Step 7. Configure PowerExchange User Authority

Step 7. Configure PowerExchange User Authority