RE: Restrict CLROUTQ--A good use for an exit program?

midrange-l-request@xxxxxxxxxxxx wrote:

>   9. RE: Restrict CLROUTQ--A good use for an exit program?
>      (David A Parnin)
>
>Actually, virtually all users have *SPLCTL (yea, I know... what's with
>that?).  That was a product of a former employee and nobody has made the
>push to do anything about it.  I did look at removing *SPLCTL from
>everybody which would solve the problem of clearing the outq's but it still
>wouldn't leave any "footprints in the butter" of who the responsible party
>was.  I would also have to change the outq's too to allow people to see
>other people's spool files (where needed).  Still, we have a number of jobs
>scheduled in Robot under group profiles like SSA or KRONOS.  Who would be
>able to delete those spool files?

David:

If "footprints in the butter" is your major concern, consider turning on 
auditing for *SPLFDTA and/or *PRTDTA. Job accounting of print data can add 
excellent detail as well.

No need to do anything with CLROUTQ unless you actually want to restrict users 
from the function. And if restriction is what you're really after, then setting 
the proper security on the outqs and removing *SPLCTL (and possibly *JOBCTL) is 
where you should be looking.

The answer to "Who would be able to delete those spool files?" would then be 
"Whoever you authorize." Note that it could also be performed by a CL program 
compiled as USRPRF(*OWNER) or one that implemented a profile swap. Give 
authority to the program to whichever users are appropriate and have the 
program validate the requests -- that's essentially what your validity-checker 
or exit program for CLROUTQ would have to do anyway.

Tom Liotta

-- 
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788 x313
Fax    253-872-7904
http://www.powertech.com



__________________________________________________________________
Introducing the New Netscape Internet Service. 
Only $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need. 

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp