Administration and Programming Guide for OS/400

Granting Access Rights to Objects Accessed by Net.Data

Before using Net.Data, you need to ensure that the user IDs under which Net.Data executes have the appropriate access rights to objects that are referenced in a Net.Data macro and to the macro that a URL references.

More specifically, ensure that the user IDs under which Net.Data executes have the following authorizations:

• To read the Net.Data initialization file, INI.FILE/DB2WWW.MBR
• To execute the Net.Data executable files and service programs, and to search the directories (libraries) in the paths to the executable files and service programs
• To read the appropriate Net.Data macro files and search the appropriate directories identified by the MACRO_PATH path configuration statement
• To execute the appropriate files and to search the appropriate directories identified by the EXEC_PATH path configuration statement
• To read the appropriate files and to search the appropriate directories identified by the INCLUDE_PATH path configuration statement
• To read and write the appropriate files, and to search the appropriate directories identified by the FFI_PATH path configuration statement
• To access any object that might be referenced by the target of a language environment statement. For example SQL language environment runs SQL statements, and SQL statements access database files, so the user ID that Net.Data is running under must have authority to the database files.

Examples:

Depending on the file system in which you choose to store your Net.Data macros, you need to authorize the user profile under which the Net.Data CGI program is run to the Net.Data macro. The following methods give the QTMHHTP1 user profile authority (in V3R2 and V3R7, Internet Connection for AS/400 ran CGI programs only under the QTMHHTP1 user profile.):

• In the root file system, use the Change Authority (CHGAUT) CL command to give authority to the user profile:

  CHGAUT OBJ('/WWW') USER(QTMHHTP1) DTAAUT(*RX)
  CHGAUT OBJ('/WWW/macro') USER(QTMHHTP1) DTAAUT(*RX)
  CHGAUT OBJ('/WWW/macro/*') USER(QTMHHTP1) DTAAUT(*RX)
  

  You need to give authority to all objects in the path.

• In the library file system (QSYS.LIB), use the Grant Object Authority (GRTOBJAUT) CL command to give authority to the user profile:

  GRTOBJAUT OBJ(WWW) OBJTYPE(*LIB) USER(QTMHHTP1) AUT(*USE)
  GRTOBJAUT OBJ(WWW/MACRO) OBJTYPE(*FILE) USER(QTMHHTP1) AUT(*USE)
  

  You need to give authority only to the library and the source physical file.

  You can also use the CHGAUT CL command to give authority to objects in the QSYS.LIB file system as follows:

  CHGAUT OBJ('/QSYS.LIB/WWW.LIB') USER(QTMHHTP1) DTAAUT(*RX)
  CHGAUT OBJ('/QSYS.LIB/WWW.LIB/MACRO.FILE') USER(QTMHHTP1) DTAAUT(*RX)
  

Language environment-specific authority considerations are documented in each language environment section in Using Language Environments.