Re: Active joblog security

Where can I get the FCNID lists ?

Best regards,

Vengoal

Ed Fishel ??:

Rob Berendt wrote on 08/03/2005 01:17:06 PM:

iSeries Navigator
Right click on the connection
Select Application Administration
Host Applications tab
Expand Operating System/400
Expand All Object
Turn on 'Access job log of *ALLOBJ job" for users with default access.

If

you need more granularity, select 'Customize'.

If you use a V5R3 system you can also use one of these commands to change
the default authority or give a specific user authority to this function.

CHGFCNUSG FCNID(QIBM_ACCESS_ALLOBJ_JOBLOG) DEFAULT(*ALLOWED)
CHGFCNUSG FCNID(QIBM_ACCESS_ALLOBJ_JOBLOG) USER(user-profile)
USAGE(*ALLOWED)

Both the CL command and GUI methods apply only to a job log of an active
job.  Also, even after you give someone authority to the
QIBM_ACCESS_ALLOBJ_JOBLOG function, they will still need to have *JOBCTL
special authority to use DSPJOBLOG to view the job log of another user.
Once the job log has been printed, authority to this function does not help
because the authority rules for spooled files takes over.

Ed Fishel,
edfishel@xxxxxxxxxx