RE: [Security400] DSPJOBLOG needs *JOBCTL authority?

[Anton Gombkötö <gombkoetoe@xxxxxxxxxx>]

At 11:42 26.09.01 -0400, you wrote:
>This is a multi-part message in MIME format.
>--
>[ Picked text/plain from multipart/alternative ]
>"fundle"?  Uh, Anton, your translator garbled something there. <g>

Well, i learned that kind of english from Steve Martin's "Dead men don't
wear plaid", so please be patient, i promise to not cook you his kind of
java... ;-)

>You know what, though, I think I like that word.  "Don't fundle around with
>that!"
>
>Anyway, I concur with what you said about "fiddling" with IBM objects.
>Normally I would simply take the approach you suggested, creating a
>separate program with parms to call the DSPJOBLOG command with *OWNER
>adopted authority yada yada.  The problem with that scenario is that the
>user was attempting to view the job log of an active job using option 10
>from the "Work with Job" menu.

You can override the msgf.  I managed to replace DSPJB by WRKJOB, i'm quite
confident that one can replace DSPJOBLOG by a MYJOBLOG or something like that.

>   AFAIK, my only hope is to create my own
>DSPJOBLOG command that appears higher in the library list than the one
>in QSYS.  This command's CPP would do the things you suggested and I
>presume this would work as a solution.  This assumes that option 10 does
>not qualify the DSPJOBLOG command (and how would one determine that?)

By DSPMSG *ALL and search a little bit. (I don't like that LIBL approach at
all. That's why some of my commands are fully qualified with QSYS/cmdxxx ;-)

>But what a mess!  Now I have to create a new library that has to be put
>above QSYS in the system library list by changing the QSYSLIBL system
>value.  Our QA & Security Audit teams will have a fun time with that.

They would have had much more fun wih your allow everybody to view anything
approach, wouldn't they? ;-)



Mit freundlichen Grüssen / best regards

Anton Gombkötö

Avenum Technologie GmbH
Wien - Mattsee - Stuttgart
e-mail Office   :       mailto:Anton.Gombkoetoe@avenum.com
Homepage        :       http://www.avenum.com

Lest das Redbook / read the redbook "Who knew you could do that with RPG?":
http://www.redbooks.ibm.com/abstracts/sg245402.html