Re: security of spooled files

[Evan Harris <spanner@xxxxxxxxxx>]

Hi Lynette

there are probably a few things worth considering.

Put the payroll spool files in their own outqueue, preferably also in a 
separate payroll library if you don't already have one. You can then secure 
the outqueue and library appropriately to restrict access.

Depending on your precise needs, you can also examine the effect of the 
DTAAUT parameter on the outqueue. Also worth considering is how many people 
have SPLTCTL, JOBCTL and ALLOBJ authority. Depending on how you set the 
outqueue up people with these authorities may still be able to access the 
spool files.

As far as I know, you will never be able to prevent the holders of ALLOBJ 
authority being able to see the spool files without some kind of 
application level intervention

Hope this helps
Evan Harris

>I was wondering if anyone had any ideas of how to secure my payroll 
>processor's spool files.  Her reports and etc are accessible to others.

+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---