Re: Active joblog security

Rob Berendt wrote on 08/03/2005 01:17:06 PM:

> iSeries Navigator
> Right click on the connection
> Select Application Administration
> Host Applications tab
> Expand Operating System/400
> Expand All Object
> Turn on 'Access job log of *ALLOBJ job" for users with default access.
If
> you need more granularity, select 'Customize'.

If you use a V5R3 system you can also use one of these commands to change
the default authority or give a specific user authority to this function.

CHGFCNUSG FCNID(QIBM_ACCESS_ALLOBJ_JOBLOG) DEFAULT(*ALLOWED)
CHGFCNUSG FCNID(QIBM_ACCESS_ALLOBJ_JOBLOG) USER(user-profile)
USAGE(*ALLOWED)

Both the CL command and GUI methods apply only to a job log of an active
job.  Also, even after you give someone authority to the
QIBM_ACCESS_ALLOBJ_JOBLOG function, they will still need to have *JOBCTL
special authority to use DSPJOBLOG to view the job log of another user.
Once the job log has been printed, authority to this function does not help
because the authority rules for spooled files takes over.

Ed Fishel,
edfishel@xxxxxxxxxx