Re: Authority User Profile

[John Earl <johnearl@xxxxxxxxxxx>]

Winardi wrote:

> Can anyone give me advice. I want to set up user profile who just can
> display spool file but who can not delete it.

Spool file security is quite a bit different than usual AS/400 security.

First, The user should not have any special authorities, especially not *SPLCTL
*JOBCTL or *ALLOBJ.   (OK their are ways to secure an outq when the user has 
some
of these special authorities, but I'm giving you the fast path).

Then create (or change) the OUTQ's in question so that "Authority to Check"
parameter is eqaul to "Data Authority"  (Ex: AUTCHK(*DTAAUT)) and the "Display
Data" parameter is equal to yes (Ex: DSPDTA(*YES)).

Then set the object authority on the outq to *USE for that user.  This will give
the user read authority only.

HTH,

jte

--
John Earl                                              johnearl@toolnet.com
PowerTech Toolworks                         206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                    www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---