Re: Restrict CLROUTQ--A good use for an exit program?

[Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>]

Hey, Dave, I'm with you. Why take the easy way? And there's always 
something new!

I made a mistake - OBJAUD should be *ALL - *USRPRF means you also need to 
set up auditing in the user profile.

When set to *ALL, at least according to the help text, it says that READs 
and CHANGEs will have an entry added to the journal. This suggests to me 
that failed attempts to use the command (a READ, correct?) will be logged. 
But I've not verified this.

Good luck, whatever new thing you try!
Vern

At 02:36 PM 5/10/2004, you wrote:

> Vern,
>
> People may have called me "simple" in the past but I haven't always been
> known for doing things the easy way.  :)  I think that I'm still inclined
> to go the exit program route mostly because it would get me started with
> exit programs.  I am curious--If you turn on auditing for the CLROUTQ
> command does it log attempts to use the command by users who aren't
> authorized it or does it only log when it was successfully used?  As you
> can probably tell I also haven't used auditing or journaling before.
> Either way I guess I get to learn something new!
>
> Dave Parnin
> Nishikawa Standard Company
> Topeka, IN  46571
> daparnin@xxxxxxxxxxxxxxxxxx
>
>
>
>
>
>                       Vern 
> Hamberg 
>
>                       <vhamberg@centerfieldtech        To:       Midrange 
> Systems Technical Discussion
>                       nology.com> 
> <midrange-l@xxxxxxxxxxxx>@SMTP@CTB
>                                                        cc: 
>
>                       05/10/2004 02:14 PM              Subject:  Re: 
> Restrict CLROUTQ--A good use for an exit
>                       Please respond 
> to                 program? 
>
>                       Midrange 
> Systems 
>
>                       Technical 
> Discussion 
>
>                       <midrange-l@xxxxxxxxxxxx> 
>
>
>
>
>
>
>
>
> Dave, the simplest way is to turn on auditing for the command. Use
>
> CHGOBJAUD OBJ(CLROUTQ) OBJTYPE(*CMD) OBJAUD(*USRPRF)
>
> You might want to do the same with the CHGOBJAUD command!  ;-)
>
> And be sure to know which users have *AUDIT special authority - they can
> change auditing even if they do not have authority to an object, according
> to the help text.
>
> Then you need to have a journal called QAUDJRN. And set system value
> QAUDCTL. The easiest way is to GO SECTOOLS and use option 10. For this
> purpose, all you need is object auditing (*OBJAUD).
>
> HTH
> Vern
>
> At 11:27 AM 5/10/2004, you wrote:
> >Good morning all,
> >
> >We have a situation where someone appears to be clearing an outq for a
> >printer used by many people.  There's no real need for any user to be
> using
> >the CLROUTQ command or choosing option 14 from WRKOUTQ.  What we would
> like
> >to do is to log the user-id of people trying to do this and give an error
> >message to any non-MIS people.
> >
> >My boss initially suggested creating a modified CLROUTQ command that was
> >higher in the library list than the system command.  Over the weekend I
> >started wondering if an exit program could do the job.  I've never
> >attempted an exit program before but wouldn't mind learning.  I've seen
> >examples for FTP and Telnet in the archives but can they be added for any
> >command?
> >
> >I would appreciate any advice.  Thanks.
> >
> >Dave Parnin
> >Nishikawa Standard Company
> >Topeka, IN  46571
> >daparnin@xxxxxxxxxxxxxxxxxx