OBJECT privileges
OBJECT is a group of privileges that has potential to compromise the security of protected objects such as files or logical name tables. It includes:
- DIAGNOSE allows a process to run online diagnostic programs and intercept and copy messages written to the error log file
- READALL allows a process to bypass existing restrictions that would otherwise prevent the process from reading an object (such as UIC Protection or ACLS)
- VOLPRO allows a process to affect volumes
