RE: Not authorized to spooled file - CPF3492

["Ingvaldson, Scott" <SIngvaldson@xxxxxxxxxxxx>]

Jim -

You're right, it would appear that it should be working.  Try these tests:

1.)  (Temporarily)Give QPGMR *ALLOBJ and *SPLCTL authority.  If this works
then your user is adopting authority properly and you need to work on
QPGMR's authority to the spooled files, Outq's or whatever.

2.)  (Temporarily)Give your user *ALLOBJ and *SPLCTL authority.  If this
works then the adopted authority is not working and you need to recompile
the program.

Once you figure out where the problem is take away *ALLOBJ and *SPLCTL
authority, then grant the specific authorities needed to run your program.

Regards,

Scott Ingvaldson
iSeries System Administrator
GuideOne Insurance Group 

-----Original Message-----
date: Fri, 24 Sep 2004 13:20:03 -0400
from: "Jim Franz" <franz400@xxxxxxxxxxxx>
subject: Re: Not authorized to spooled file - CPF3492

I would think that the *splctl alone would do it.
There is an interesting paragraph in Info Center (search: cpysplf authority
(note it says for dspdta "when the outq created..."
For the Copy Spooled File (CPYSPLF), Display Spooled File (DSPSPLF), and
Send Network Spooled File (SNDNETSPLF) commands, in addition to the four
ways already listed, there is an additional way a user can be authorized. If
DSPDTA(*YES) was specified when the output queue was created, any user with
*USE authority to the output queue will be allowed to run these commands.
The specific authority required is *READ data authority. Copying,
displaying, sending, and moving a file to another output queue by changing
the spooled file can be limited by specifying DSPDTA(*OWNER). Then only the
owner of the spooled file or user with *SPLCTL can perform these operations
on the spooled file.

jim



----- Original Message ----- 
From: <fkany@xxxxxxxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Friday, September 24, 2004 11:18 AM
Subject: RE: Not authorized to spooled file - CPF3492


>
>
> Here is a more detailed description of what I'm trying to accomplish.
>
> (OBJECTIVE) - Email any spool file regardless of what outq it was created
> in and who created it without making PERMANENT changes to the OUTQ
> attributes.
>
> (TASKS) - I compiled the CL program with USRPRF(*OWNER).  The owner for
the
> CL program object is QPGMR.  I checked to make sure QPGMR has *SPLCTL and
> it does.  Here's the area of the CL program where I get the errors:
> CHGOUTQ     OUTQ(&SOMEOUTQ)   AUTCHK(*DTAAUT)
> CPYSPLF     FILE(&SPOOLFILE)  TOFILE(QTEMP/WORKFILE)  +
>             JOB(&JOBNUMB/&JOBUSER/&JOBNAME) +
>             SPLNBR(&SPLFNUMB)
> CHGOUTQ     OUTQ(&SOMEOUTQ)   AUTCHK(*OWNER)
>
> (ERRORS) - When I run the program under a test user profile, "Not
> authorized to use object SOMEOUTQ" error occurs when the CHGOUTQ
> OUTQ(&SOMEOUTQ) AUTCHK(*DTAAUT) is executed.  When I remove the CHGOUTQ
> command the CL just tries to execute the CPYSPLF command, the "Not
> authorized to spooled file" error occurs.
>
> Am I missing anything?  Please let me know if you need to know more
> information.
>
> TIA,
>
> Frank
   
This message and accompanying documents are covered by the Electronic
Communications Privacy Act, 18 U.S.C. §§ 2510-2521, and contains information
intended for the specified individual(s) only. This information is
confidential. If you are not the intended recipient or an agent responsible
for delivering it to the intended recipient, you are hereby notified that
you have received this document in error and that any review, dissemination,
copying, or the taking of any action based on the contents of this
information is strictly prohibited. If you have received this communication
in error, please notify us immediately by e-mail, and delete the original
message.