--- title: The New Navigator For i description: Navigator Heritage can't be updated to log4j v2.x or be removed from use. Let's see how you can manage this problem. image: https://blog.easi.net/hubfs/New%20navigatr%20for%20i%20-%20header%20-%20EN.jpg --- [![Home](https://blog.easi.net/hubfs/easi-logo.svg)](https://easi.net) Hit enter to search - [All](https://blog.easi.net/en) - [Adfinity](https://blog.easi.net/en/tag/adfinity) - [Cloud](https://blog.easi.net/en/tag/cloud) - [Easi](https://blog.easi.net/en/tag/easi) - [Microsoft](https://blog.easi.net/en/tag/microsoft) - [Rooftop](https://blog.easi.net/en/tag/rooftop) - [Security](https://blog.easi.net/en/tag/security) - [SmartSales](https://blog.easi.net/en/tag/smartsales) - [Spoom](https://blog.easi.net/en/tag/spoom) [Go back to the blog](https://blog.easi.net/en?hsLang=en) # [The New Navigator For i](https://blog.easi.net/en/the-new-navigator-for-i) [![Author Avatar](https://blog.easi.net/hs-fs/hubfs/RHEL-small.jpg?width=149&quality=low) Rudi van Helvoirt](https://blog.easi.net/en/author/rudi-van-helvoirt) The log4j issue was all over the news back in December 2021, one of its victims is the now called Heritage Navigator for i. IBM did publish a document titled: [Security Bulletin: IBM i components are affected by CVE-2021-4104 (log4j version 1.x)](https://www.ibm.com/support/pages/node/6539162) When looking at this document you will find a section called “Workarounds and Mitigations”, in there you can read the following: **IBM Navigator for i - heritage version** uses log4j v1.x and cannot be updated to log4j v2.x or be removed from use.  Customers can mitigate the CVE by discontinuing the use of the heritage version of IBM Navigator for i. In this document you will find the instruction for what needs to be done to shut down the heritage version of Navigator for i and because of log4j it is time to send it into retirement. The king is dead, so long live the new king, but before you start using the New Navigator for i (Nav4i), you better start by first looking at the function usage for Nav4i first. Below a definition found on IBM's website: Function usage provides the ability to implement granular security controls rather than granting users powerful special authorities such as all object, job control, or service. This article review all the function usage IDs that are available and their purpose.  To get a better idea what it is, the image shown below might ring a bell: ![IBM navigator for i - image 1 text](https://blog.easi.net/hs-fs/hubfs/IBM%20navigator%20for%20i%20-%20image%201%20text.jpg?width=790&name=IBM%20navigator%20for%20i%20-%20image%201%20text.jpg) What you are seeing may bring back memories from iSeries Navigator for i, the tree structure did look exactly the same. As the heritage Navigator for i started by default, the column “Default Access” check box will give a user with no extra authority the possibility to signor to the heritage Navigator for i and have a look at all the user profiles present on the system. By default, all the boxes for “Default Access” are checked, so most system administrators have made adjustments in that area and will only allow access to users with \*ALLOBJ authority. Back in the time when iSeries Navigator for i was replaced by IBM Systems Director Navigator for i, the predecessor of the heritage Navigator for i, you might think the new Nav4i is using the same Usage Functions. I hate to spoil the surprise, but that is not the case. For the new Nav4i IBM did start with new Functions. In order to find out what their names are, please have a look at the image below, where you can see how to maintain them: ![New-navigator-for-i---image-2-text](https://blog.easi.net/hs-fs/hubfs/New-navigator-for-i---image-2-text.jpg?width=555&name=New-navigator-for-i---image-2-text.jpg)   When selecting the option “Function Usage” the Db2 for i service [QSYS2.FUNCTION\_INFO](https://www.ibm.com/support/pages/qsys2systemstatusinfo) is executed, showing you: ![new-navigator-for-i---image-3-text](https://blog.easi.net/hs-fs/hubfs/new-navigator-for-i---image-3-text.jpg?width=1137&name=new-navigator-for-i---image-3-text.jpg) All the Function IDs with “NAV” in their name are the new functions made available to control the availability of functions within the new Nav4i. When using the filter function as shown below you will see that the numbers match: ![New-navigator-for-i---image-4-text](https://blog.easi.net/hs-fs/hubfs/New-navigator-for-i---image-4-text.jpg?width=1137&name=New-navigator-for-i---image-4-text.jpg) Well, not exactly. The number of icons on the left is higher, but if you leave the one on top and the last two out, the number is 11. The number on display is 12. The difference is made by the Function ID: “QIBM\_NAV\_ALL\_FUNCTION” with the description: “USE OF IBM NAVIGATOR FOR i FUNCTIONS”. Which does make sense, as that Function ID will give you control over what other users are seeing. When hovering over a line after having selected it, the option “Change” will pop up: ![new-navigator-for-i---image-5-text](https://blog.easi.net/hs-fs/hubfs/new-navigator-for-i---image-5-text.jpg?width=691&name=new-navigator-for-i---image-5-text.jpg) When selecting it, your screen will look like this: ![new-navigator-for-i---image-6-text](https://blog.easi.net/hs-fs/hubfs/new-navigator-for-i---image-6-text.jpg?width=1347&name=new-navigator-for-i---image-6-text.jpg) As a system administrator, it is your task to grant the right users access to what they need to do their job. I do not think it needs an explanation to remove the default authority for users without \*ALLOBJ authority. Even removing the authority for users with \*ALLOBJ might be a good idea, if your application comes with a user with \*ALLOBJ which is used by the application manager. So who do you grant and who do you deny access is always the question. As always, the answer is: It depends. The good thing is that as long as you do not remove yourself from the Product ID “ QIBM\_NAV\_ALL\_FUNCTION” to have the option to correct yourself. If you make the error to lock yourself out, you can still correct that using 5250 emulation with the command: “WRKFCNUSG FCNID(QIBM\_NAV\_ALL\_FUNCTION)”.       After denying a user access for a Function ID, a user can still hover over the icon and see all the option available, but when selecting one of them the window shown below will pop up: ![new-navigator-for-i---image-7-text](https://blog.easi.net/hs-fs/hubfs/new-navigator-for-i---image-7-text.jpg?width=717&name=new-navigator-for-i---image-7-text.jpg) After going through all Product ID's and having set the access for new Nav4i according to your wishes. You are ready to go and start using the new Nav4i and soon you will have forgotten all about the heritage Navigator for i. Why? Well, because the new Nav4i is so much better. Yes, it is that simple. [![M365 Discovery Track - Hubspot Banner - EN](https://no-cache.hubspot.com/cta/default/473564/interactive-156863034745.png)](https://blog.easi.net/hs/cta/wi/redirect?encryptedPayload=AVxigLLHNs4jm%2BdICuit85dIhpDZGA04lPDeP9jwW6gEnV5btL56%2FPAETIMElsHzKug4X3aKcvHTtEgsbICS6cDBlVU24d7nGN%2F5iR3FDu7%2B6%2BOkCZBBfUs6Z0TZC3eday5ctJIYxDr2bUNh%2BVl1aVIIUr%2Bgi4i%2B%2BD%2B%2FPzwrd7HStdA6VWrLrtMLrDkarHCAaPCO4FrOx3LNdGd1&webInteractiveContentId=156863034745&portalId=473564&hsLang=en)   [IBM Power](https://blog.easi.net/en/topic/ibm-power?hsLang=en) [Infrastructure](https://blog.easi.net/en/topic/infrastructure?hsLang=en) [IBM i](https://blog.easi.net/en/topic/ibm-i?hsLang=en) ## Current job openings We are constantly looking for new colleagues! If you share our values and you're looking for a challenging job in Belgium's Best Workplace, visit our website. [Apply now](https://easi.net/en/jobs) ### Get our top stories in your inbox every month ## Follow us [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/easi.net) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](https://www.linkedin.com/company/easi) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/easi_net) ## Recent posts ![Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%286%29-1.png) ### [Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/en/solutions/microsoft/copilot-cowork-is-now-available?hsLang=en) 10/03/2022 ![Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%283%29.png) ### [Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/en/solutions/microsoft/m365-archive-file-level?hsLang=en) 10/03/2022 ![GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20Protect%20-%20EN%20%281%29.png) ### [GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/en/solutions/security/grc-in-belgium-why-protect-is-where-insight-becomes-action?hsLang=en) 10/03/2022 ## Share this article [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.easi.net%2Fen%2Fthe-new-navigator-for-i%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fthe-new-navigator-for-i%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.easi.net%2Fen%2Fthe-new-navigator-for-i%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fthe-new-navigator-for-i%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=The%20New%20Navigator%20For%20i) ### Never miss our stories ## Related articles [See all blog articles](https://blog.easi.net/en/tag/ibm-power) ![The 3 most common mistakes made on IBM i](https://blog.easi.net/hubfs/Images/Infrastructure/mistakesibm.jpg) ### [The 3 most common mistakes made on IBM i](https://blog.easi.net/en/services/ibm-power-systems/the-3-most-common-mistakes-made-on-ibm-i?hsLang=en) These are 3 lifesavers when you are talking about keeping your IBM i infrastructure up to date. [Read more](https://blog.easi.net/en/services/ibm-power-systems/the-3-most-common-mistakes-made-on-ibm-i?hsLang=en) ![Host your Python application on IBMi](https://blog.easi.net/hubfs/Host%20your%20Python%20application%20on%20IBMi-header-en.jpg) ### [Host your Python application on IBMi](https://blog.easi.net/en/host-your-python-application-on-ibmi?hsLang=en) We all start with building our applications on our own desktop. We start making a new project or... [Read more](https://blog.easi.net/en/host-your-python-application-on-ibmi?hsLang=en) ![Easi at Common Europe Congress 2022](https://blog.easi.net/hubfs/EN-Easi-op-Common-Europe-congress-2022.jpg) ### [Easi at Common Europe Congress 2022](https://blog.easi.net/en/easi-op-common-europe-congress-2022?hsLang=en) On the 13th of June, IBM i users from all over Europe will meet for the Common Europe Congress,... [Read more](https://blog.easi.net/en/easi-op-common-europe-congress-2022?hsLang=en) - [Solutions](https://www.easi.net) - [AAA Financials](https://www.easi.net/en/solutions/aaa-financials) - [Adfinity](https://adfinity.easi.net) - [Cloud2be](https://www.easi.net/en/solutions/managed-cloud) - [Rooftop](https://www.easi.net/en/solutions/rooftop) - [Security](https://www.easi.net/en/solutions/security) - [SmartSales](https://www.easi.net/en/solutions/smartsales) - [SmartDrive](https://smartdrive.easi.net) - [SmartShare](https://smartshare.easi.net) - [Synchro Production](https://www.easi.net/en/solutions/synchro-production) - [Services](https://www.easi.net/en/services) - [Mobile Development](https://www.easi.net/en/services/mobile-development) - [Software development](https://www.easi.net/en/services/application-development) - [Managed Services](https://www.easi.net/en/services/managed-services) - [On Premise infrastructure](https://www.easi.net/en/services/it-infrastructure-projects) - [Cosourcing](https://www.easi.net/en/services/co-sourcing) - [End user support](https://www.easi.net/en/services/end-user-support) - [Company](https://www.easi.net) - [About EASI](https://www.easi.net/en/about-easi) - [Jobs](https://www.easi.net/en/jobs) - [Blog](https://blog.easi.net) - [Press](https://www.easi.net/en/press) - [Customer stories](https://www.easi.net/en/customer-stories-references) - [Trainings](https://www.easi.net/en/trainings) - [Events](https://www.easi.net/en/events) - [Customer support](https://www.easi.net/en/customer-support) - [Legal](https://www.easi.net/en/about/legal/website-privacy-policy) - Useful links - [Microsoft](https://www.easi.net/en/services/microsoft) - [IBM Power Systems](https://www.easi.net/en/services/ibm-power-systems) - [IBM Notes](https://www.easi.net/en/services/ibm-notes) - [EASI Jump](https://www.easi.net/en/easi-jump) - [English](https://blog.easi.net/en/the-new-navigator-for-i) - [Français - Belgique](https://blog.easi.net/fr/the-new-navigator-for-i) - [Nederlands - België](https://blog.easi.net/nl/the-new-navigator-for-i) - [Privacy](https://www.easi.net/about/legal/website-privacy-policy) - [info@easi.net](mailto:info@easi.net) - [+32 67 28 10 00](tel:+3216313000) - [Contact](https://www.easi.net/en/contact) - - - - - -