AW: AW: outqueue - data authority

["Knezevic, Mihael" <m.knezevic@xxxxxxxx>]

> -----Ursprüngliche Nachricht-----
> Von: midrange-l-bounces@xxxxxxxxxxxx 
> [mailto:midrange-l-bounces@xxxxxxxxxxxx] Im Auftrag von Ed Fishel
> Gesendet: Freitag, 13. Mai 2005 20:24
> An: Midrange Systems Technical Discussion
> Betreff: Re: AW: outqueue - data authority
> 
> To my response him, Mihael Knezevic wrote on 05/13/2005 12:57:13 PM:
> > > >From Appendix D of the Security Reference manual, my
> > > understanding is
> > > >that
> > > when DSPDTA is *NO and AUTCHK is *DTAAUT then a user 
> without *SPLCTL 
> > > special authority will need *READ, plus *ADD plus *DLT 
> authority to 
> > > the output queue to display some other users spooled files.
> > hmm. i thought *SPLCTL will give u full control over the outqueue.
> > in conjuction with AUTCHK *SPLCTL was never mentioned. can 
> u point me 
> > to a link to a document which refers to this?
> 
> I think you did not understand my statement. Perhaps it was 
> poorly worded or perhaps you were thinking the word "with" 
> instead of "without". A user with *SPLCTL will have full 
> access to the spooled files on an output queue.

oh. sorry. i read your answer too quickly. but then i have configured it 
correctly and it ain't working the way it should be.

got DSPDTA *NO and AUTCHK *DTAAUT and object authority on the outqueue PUBLIC 
*USE and data authority to *RX. but still a user can only view his own spool 
files and not a spool file of another user in that outqueue. any other things i 
have to look for?

> The Security Reference manual is available on the iSeries 
> Information Center, www.ibm.com/iseries/infocenter. Go to 
> "Printable PDFs and manuals"
> and search for "iSeries Security Reference

thanx for the link. i'll have a look at it.

> Ed Fishel,
> edfishel@xxxxxxxxxx
> 
> --
> This is the Midrange Systems Technical Discussion 
> (MIDRANGE-L) mailing list To post a message email: 
> MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change 
> list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, 
> please take a moment to review the archives at 
> http://archive.midrange.com/midrange-l.
> 
>