RE: QSYS2.OUTPUT_QUEUE_ENTRIES & 01548

The audit log shows AF entries on a number of libraries, the vast major IBM libs. None of those libraries contains any output queues. There are no AF entries for any queues.

Sorry, I should have posted this earlier.



-----Original Message-----
From: Bdietz400 [mailto:bdietz400@xxxxxxxxx]
Sent: Tuesday, February 18, 2020 9:01 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: QSYS2.OUTPUT_QUEUE_ENTRIES & 01548

This sound like a good candidate for authority collection, if on 7.3+, it should tell you if there are any “missing” authorities the end user would need.

--
Bryan Dietz

On Feb 18, 2020, at 8:56 AM, Justin Taylor <JUSTIN@xxxxxxxxxxxxx> wrote:

Here's the initial query:
select SPOOLED_FILE_NAME, USER_DATA, STATUS, OUTPUT_QUEUE_NAME,
CREATE_TIMESTAMP
from QSYS2.OUTPUT_QUEUE_ENTRIES
where USER_NAME = current_user
and OUTPUT_QUEUE_NAME not in ()
and CREATE_TIMESTAMP > current_timestamp - 10 minutes
for read only

She shouldn't have any spooled files in restricted output queues, but I am limited the queues to suppress extraneous data.

Thanks




-----Original Message-----
From: Rob Berendt [mailto:rob@xxxxxxxxx]
Sent: Tuesday, February 18, 2020 7:15 AM
To: Midrange Systems Technical Discussion
<midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: RE: QSYS2.OUTPUT_QUEUE_ENTRIES & 01548

Have you tried limiting it to her own spool files?
select *
from qsys2.output_queue_entries
where user_name='DUMMY'
;

Are you selecting an output queue where she may have spool files but may not be authorized to the output queue itself? Perhaps the program generating the spool file has adopted or some such thing to the output queue.

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com


-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
Justin Taylor
Sent: Monday, February 17, 2020 5:44 PM
To: MIDRANGE-L (midrange-l@xxxxxxxxxxxxxxxxxx)
<midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: QSYS2.OUTPUT_QUEUE_ENTRIES & 01548

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


I'm trying to use QSYS2.OUTPUT_QUEUE_ENTRIES for a user to list her own spooled files, but it turns out she's not authorized. It's giving:
01548

The authorization ID does not have the privilege to perform the specified operation on the identified object.



I assume the problem is that OUTPUT_QUEUE_ENTRIES can bring back other user's spooled files. Is there another service that can retrieve only a user's own spooled files?


TIA
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com