Re: OUTQ PROTECTION.

["John Earl" <john.earl@xxxxxxxxxxxxxxxxxx>]

You can change a couple of the parameters on the outq so that it will
respect regular old OS/400 object authorities.
Use the DSPOUTQD command to display the OUTQ description and then F13 to
change the description.
Change the AUTCHK parameter to "Data Authority" (*DTAAUT), and then, if you
want to prevent users with *JOBCTL special authority from accessing the
entries in the OUTQ, you'll want to set the "Operator Controlled" parameter
(*OPRCTL) to "*NO".

Then use the EDYOBJAUT  command to control which users have read (*USE) or
change (*CHANGE) authority to the OUTQ.  As Jeff mentioned, these changes
will not have any restricting effects on users with *SPLCTL special
authority.

jte



--
John Earl
www.powertechgroup.com  john.earl@powertechgroup.com
The Powertech Group Inc. Seattle, Washington
Where the Security Experts Live!

Phone: +1-253-872-7788
Fax:      +1-253-872-7904
--
----- Original Message -----
From: <pedro.reis@valeo.com>
To: <midrange-l@midrange.com>
Sent: Monday, July 29, 2002 1:52 AM
Subject: OUTQ PROTECTION.



What is the best way of protecting an OUTQ for certain users ? when i say
protecting , i  mean restricting the number of users who can
use/change/delete the spool files.
i tried  by the outq parameters , but if only the owner of the spool file
can change it , its not the correct decision for me , because what we have
its a group  of users who need to change/use their spool files:

                        Alterar Fila de Output (CHGOUTQ)
 Indique as opções, prima Enter.
                            Parâmetros Adicionais
 Ver qualquer ficheiro  . . . . . DSPDTA         *OWNER
 Separadores de trabalho  . . . . JOBSEP         0
 Controlados pelo operador  . . . OPRCTL         *YES
 Fila de dados  . . . . . . . . . DTAQ           *NONE
   Biblioteca . . . . . . . . . .
 Autoridade para controlar  . . . AUTCHK         *OWNER

I thought in changing the autorizations of the object , i wonder if it
produce the effect i need ?




           Editar Autoridade sobre Objectos
 Objecto  . . . . . . :   IMPPR07         Proprietário . . . . :   QPGMR
   Biblioteca . . . . :     QUSRSYS       Grupo principal  . . :   *NONE
 Tipo de objecto  . . :   *OUTQ
 Indicar alterações de autoridades correntes, premir Enter.
   Objecto guardado pela lista de autorizações . . . . . . . . .   *NONE
                         Autoridade
                           sobre
 Utilizador  Grupo        Objectos
 QSPL                     *CHANGE
 QSECOFR                  *ALL
 *GROUP      QPGMR        *ALL
 *PUBLIC                  *USE
Fim
 F3=Sair   F6=Adicionar novos utilizadores   F12=Cancelar   F24=Mais teclas
 (C) COPYRIGHT IBM CORP. 1980, 2000.








Fim
 F3=Sair   F4=Parâmetros   F5=Actualizar   F12=Cancelar
 F13=Como utilizar este ecrã               F24=Mais teclas






Cordialement,
Best regards,
-------------------------------------------------------------------
Pedro Reis
e-mail: pedro.reis@valeo.com
Phone: 351-258 350 725
Fax: 351-258 350060
--------------------------------------------------------------------
VALEO - Electronics & Connective Systems
Viana do Castelo - Portugal
--------------------------------------------------------------------

"This e-mail message is intended only for the use of the named
recipient(s).
The information contained therein may be confidential or privileged, and
its
disclosure or reproduction is strictly prohibited. If you are not the named
recipient, please return it immediately to its sender at the above address
and destroy it."


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.