5.2.3 The Special *PUBLIC User
When allowing or disallowing access to an object it is very difficult to nominate specific access rights for each and every IBM i user profile. To avoid having to do this a 'special' user profile of *PUBLIC can be used.
The *PUBLIC user profile means 'any other IBM i user' not specifically mentioned in the list of authorized users. Thus if a file had the following security information associated with it:
|
User
|
Def: Use
|
Def: Mod
|
Def: Dlt
|
Data: R
|
Data: A
|
Data: C
|
Data: D
|
|
QPGMR
|
X
|
X
|
X
|
X
|
X
|
X
|
X
|
|
QSECOFR
|
X
|
X
|
X
|
X
|
X
|
X
|
X
|
|
QSYSOPR
|
X
|
|
|
X
|
X
|
X
|
X
|
|
QUSER
|
|
|
|
|
|
|
|
|
*PUBLIC
|
X
|
|
|
X
|
|
|
|
|
It can be seen that:
- Users QPGMR and QSECOFR have full rights to the file.
- User QSYSOPR can read, change, update and delete records in the file but cannot modify or delete the file definition.
- User QUSER has no rights at all to the file
- Any other user (*PUBLIC) can read information from the file.
