[Security400] DSPJOBLOG needs *JOBCTL authority?

["Bale, Dan" <D.Bale@xxxxxxxxxxxxx>]

I am surprised that DSPJOBLOG requires *JOBCTL authority.  How does
someone assume "control" of a job by displaying the job log?

Regardless, I have a system operator-type user who needs to be able to
display the job log of jobs that are not his jobs.  Since (I believe) I
can not grant object authority to enable him to use the IBM command, I
am thinking that I will have to use adopted authority.  Since the CPP
for DSPJOBLOG is QMHDSPJL, could I just change the program to adopt
authority?  Just now looking that program up, it is owned by QSYS and
already runs under the *OWNER user profile; it is also set to use
adopted authority.  Since QSYS already has *JOBCTL authority, why is a
profile without this specific authority denied access to the command?

Advice on how to accomplish this would be greatly appreciated!

Dan Bale
IT - AS/400
Handleman Company
248-362-4400  Ext. 4952
D.Bale@Handleman.com