RE: Question on securing joblogs

["Graap, Kenneth" <Kenneth.Graap@xxxxxxxxxxxxx>]

You could probably change the authority to the Job Log *OUTQ restricting
*PUBLIC so they can only add spool files to the queue, but not remove
them. 


Kenneth
Kenneth E. Graap
 

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John.BresinaJr
Sent: Wednesday, April 15, 2009 2:00 PM
To: Midrange Systems Technical Discussion
Subject: Question on securing joblogs

I have been asked by some auditors if it is possible to not allow users
to delete their own job logs.  The users have no special authorities and
their group profile also has no special authorities.  The users do have
command line access as it is needed to do their jobs.  All the joblogs
are in QEZJOBLOG.

Queue:   QEZJOBLOG      Library:   QUSRSYS

Status:
  Writer active  . . . . . . . . . . . :   N
  Writer name(s) if active . . . . . . :
  Output queue held  . . . . . . . . . :   N
Maximum spooled file size:
  Number of pages  . . . . . . . . . . :   *NONE
  Starting time  . . . . . . . . . . . :
  Ending time  . . . . . . . . . . . . :
Writers to autostart . . . . . . . . . :   1
Display any file . . . . . . . . . . . :   *NO
Job separators . . . . . . . . . . . . :   0
Operator controlled  . . . . . . . . . :   *YES
Order of files on queue  . . . . . . . :   *FIFO
Data queue . . . . . . . . . . . . . . :   *NONE
  Library  . . . . . . . . . . . . . . :
Authority to check . . . . . . . . . . :   *OWNER
Remote system  . . . . . . . . . . . . :   *NONE



User defined option  . . . . . . . . . :   *NONE
User defined object:
  Object . . . . . . . . . . . . . . . :   *NONE
    Library  . . . . . . . . . . . . . :
  Object type  . . . . . . . . . . . . :
Spooled file ASP . . . . . . . . . . . :   *SYSTEM
Text description . . . . . . . . . . . :   Cleanup output queue for job
logs


John Bresina
* Target Corporation | Senior Systems Engineer | TTS  Server
Infrastructure- iSeries |  john.bresinajr@xxxxxxxxxx | 612.304.3665 | 33
South 6th St, CC-1175


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a
moment to review the archives at http://archive.midrange.com/midrange-l.