RE: Need to allow a user without *ALLOBJ special authority can view a joblog for a user with *ALLOBJ special authority. -- MIDRANGE-L

The user who is getting the privilege. So, it is sort of blanket in that the specified user can see all joblogs. But, just what I need for troubleshooting.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Vernon Hamberg
Sent: Monday, December 18, 2017 7:06 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Need to allow a user without *ALLOBJ special authority can view a joblog for a user with *ALLOBJ special authority.

Roger, Isn't that the user who is getting the privilege to use the
function? Or is there an additional user parameter? I've not looked at
the command for a few years now.

Vern

On 12/18/2017 8:50 PM, Roger Harman wrote:

I believe the CHGFCNUSG has a user parameter.

-----Original Message-----
From: MIDRANGE-L [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Vernon Hamberg
Sent: Monday, December 18, 2017 3:48 PM
To: midrange-l@xxxxxxxxxxxx
Subject: Re: Need to allow a user without *ALLOBJ special authority can view a joblog for a user with *ALLOBJ special authority.

Is this requirement for allowing a user to view joblogs for all users
with *ALLOBJ or for only 1 such user?

If the former, then the function usage approach is fine. If the latter,
then a command with a program that adopts authority is the better
approach, seems to me.

HTH
Vern

On 12/18/2017 5:33 PM, Roger Harman wrote:

I had them do that for me on our production box a long time ago. It's IBM recommended.

Curious why you're looking for an alternative. This works fine.

Roger Harman
COMMON Certified Application Developer - ILE RPG on IBM i on Power

From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxx> on behalf of Steinmetz, Paul <PSteinmetz@xxxxxxxxxx>
Sent: Monday, December 18, 2017 2:41 PM
To: 'Midrange Systems Technical Discussion'
Subject: Need to allow a user without *ALLOBJ special authority can view a joblog for a user with *ALLOBJ special authority.

I need to allow a user who does not have *ALLOBJ authority view an interactive joblog for a user with *ALLOBJ authority.
Currently getting below message

Not authorized to display joblog.

I did find this IBM tech doc that suggests

CHGFCNUSG FCNID(QIBM_ACCESS_ALLOBJ_JOBLOG) USER(USRNAME) USAGE(*ALLOWED)

This worked, but is this the only solution/alternative?

http://www-01.ibm.com/support/docview.wss?uid=nas8N1016625

IBM Allowing a User Without *ALLOBJ Special Authority to ...
www-01.ibm.com
This document shows how a user without *ALLOBJ special authority can view a joblog for a user with *ALLOBJ special authority.

Thank You
_____
Paul Steinmetz
IBM i Systems Administrator

Pencor Services, Inc.
462 Delaware Ave
Palmerton Pa 18071

610-826-9117 work
610-826-9188 fax
610-349-0913 cell
610-377-6012 home

psteinmetz@xxxxxxxxxx
http://www.pencor.com/