RE: QSYSETEGID - SBMJOB problem

["Andy Nolen-Parkhouse" <aparkhouse@xxxxxxxxxxx>]

Chris,

The snippet below from the security reference (V5R2) deals with adopted
authority and submitted jobs.  It is very likely that the same rules that
pertain to adopted authority would also apply to manipulation of the
effective group profile.

Regards,
Andy Nolen-Parkhouse

"When a new job is started, a new program stack is created for the job.
Adopted authority cannot take effect until the first program is added to
the program stack.  Adopted authority cannot be used to gain access to
any objects, such as an output queue or a job description, that are added
to the job structure before the job is routed. Therefore, even if your
interactive job is running under adopted authority when you submit a job,
that adopted authority is not used when authority is checked for the
objects on your SBMJOB request."

> I am using the QSYSETEGID to change the effective Group profile for a
> user. Everything works fine until I try a SBMJOB with a specific JOBD.
> It tells me that the JOB user does not have authority to the JOBD, but
> the effective Group Profile has *USE authority to it. Anyone know why
> this is happening?
> 
> Thanks
> 
> Chris Beck