Why can't I delete this file!!!

[Jimson_1]

Hi,

Can someone tell why I can't delete this file. I am the owner and the protection is set accordingly. There are no ACEs restricting me.

Info you may want to know:

$ sho proc
24-SEP-2007 13:31:02.70 User: CM51_CC Process ID: 2B97CDA5
Node: xxxxxx Process name: "xxxxxxxxxxxxx"

Terminal: TNA738: (Host: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)
User Identifier: [CM51_CC]
Base priority: 4
Default file spec: U40$:[CM51_CC]
Number of Kthreads: 1

Devices allocated: TNA738:
$
$
$
$ show sec U32$:[xxxxxxxxxx.SCR.TMPSCR]SHOWUSERS.COM;

U32$:[xxxxxxxxxx.SCR.TMPSCR]SHOWUSERS.COM;9 object of class FILE
Owner: [CM51_CC]
Protection: (System: RE, Owner: RWED, Group: RE, World)
Access Control List:
$
$
$
$ delete% U32$:[xxxxxxxxxx.SCR.TMPSCR]SHOWUSERS.COM;
%DELETE-W-FILNOTDEL, error deleting U32$:[cccccccccc.SCR.TMPSCR]SHOWUSERS.COM;9
-RMS-E-PRV, insufficient privilege or file protection violation

[Fekko Stubbe]

Maybe you do not have write access to the upper directory?

[Jimson_1]

The parent directory has an ACE granting me full access.


$ SHO SEC SCR:TMPSCR.DIR

U32$:[xxxxxxxxxx.SCR]TMPSCR.DIR;1 object of class FILE
Owner: [xxxxxxxxxx]
Protection: (System: RWE, Owner: RWE, Group: RE, World: E)
Access Control List:
(IDENTIFIER=[CM51_CC],OPTIONS=DEFAULT,ACCESS=READ+WRITE+EXECUTE+DELETE+CONTROL)
(IDENTIFIER=[xxxxxxxxxx],OPTIONS=DEFAULT,ACCESS=READ+WRITE+EXECUTE+DELETE+CONTROL)
$
$

[Fekko Stubbe · Accepted solution]

I cannot see if you are the owner or in the same group as the xxxx, but otherwise the above acl does NOT grant you access.
You have an ACE with "options default", and not one that allows you access to the directory. You also need an ace without the "options default".

[Heinz W Genhart]

HI JamesP

You could do the following:

$ SET WATCH FILE/CLASS=ALL
$ DELETE 'your-file'
$ SET WATCH FILE/CLASS=none

The output produced by set watch will give you more information on what's the problem.

Regards

Geni

[Jimson_1]

FS. It worked. I thought the default ACE would provid the access rights. Thanks.

HC. I tried set watch file/class=all, but I didn't have priviledges to execute it.

Thanks for your help.

JamesP