David Morris asked: > Can anyone tell me why authority to a job description used on a submit > job cannot be derived from a group profile? It appears that a jobd owned > by USERA with a primary group of USERB *USE cannot be submitted by a > USERC, which has a group profile of USERA. The job description is public > *EXCLUDE. The job description does not have a profile and the message > indicates that USERC must have *USE rights to the job description. One of the footnotes for the Job description on the SBMJOB command in Appendix D of the Security Reference manual is: "(9) Both the user submitting the job and the user profile under which the job will run are checked for authority to the referenced object." When authority of the user submitting the job is checked adopted authority and any authority from their current group profiles are used. But when the authority of the user profile under which the job will run is checked adopted authority and authority from their group profiles is not used. So USERC will need authority to the job description when it is the user profile under which the submitted job will run. I hope this helps. Ed Fishel, edfishel@xxxxxxxxxx
As an Amazon Associate we earn from qualifying purchases.
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.