RE: Question on securing joblogs

You could probably change the authority to the Job Log *OUTQ restricting
*PUBLIC so they can only add spool files to the queue, but not remove
them.


Kenneth
Kenneth E. Graap


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John.BresinaJr
Sent: Wednesday, April 15, 2009 2:00 PM
To: Midrange Systems Technical Discussion
Subject: Question on securing joblogs

I have been asked by some auditors if it is possible to not allow users
to delete their own job logs. The users have no special authorities and
their group profile also has no special authorities. The users do have
command line access as it is needed to do their jobs. All the joblogs
are in QEZJOBLOG.

Queue: QEZJOBLOG Library: QUSRSYS

Status:
Writer active . . . . . . . . . . . : N
Writer name(s) if active . . . . . . :
Output queue held . . . . . . . . . : N
Maximum spooled file size:
Number of pages . . . . . . . . . . : *NONE
Starting time . . . . . . . . . . . :
Ending time . . . . . . . . . . . . :
Writers to autostart . . . . . . . . . : 1
Display any file . . . . . . . . . . . : *NO
Job separators . . . . . . . . . . . . : 0
Operator controlled . . . . . . . . . : *YES
Order of files on queue . . . . . . . : *FIFO
Data queue . . . . . . . . . . . . . . : *NONE
Library . . . . . . . . . . . . . . :
Authority to check . . . . . . . . . . : *OWNER
Remote system . . . . . . . . . . . . : *NONE



User defined option . . . . . . . . . : *NONE
User defined object:
Object . . . . . . . . . . . . . . . : *NONE
Library . . . . . . . . . . . . . :
Object type . . . . . . . . . . . . :
Spooled file ASP . . . . . . . . . . . : *SYSTEM
Text description . . . . . . . . . . . : Cleanup output queue for job
logs


John Bresina
* Target Corporation | Senior Systems Engineer | TTS Server
Infrastructure- iSeries | john.bresinajr@xxxxxxxxxx | 612.304.3665 | 33
South 6th St, CC-1175


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.