JOBD QBATCH on new installs

Hello,

last night I read the Work Management PDF — again. Every time, I grasp more and more of the concepts there.

I learned that the QBATCH job description has USER(QPGMR) set, and that this setting might pose a security risk if the authority for the JOBD is public=use: Every user with a user profile might run batch jobs under the authority of QPGMR.

When the OS is installed freshly, the mentioned JOBD has no public authority, effectively preventing any user to submit batch jobs via SBMJOB, which is a must-have for me.

I want to hear your opinions if it would be a good idea to still change authority to public=use, but also to change the JOBD parameter USER(*RQD). Or perhaps how you wold solve that dilemma.

Thanks!

:wq! PoC