Re: Apache

[web400@xxxxxxxxxxxxxxxx]

> When I run with UserID %%SERVER%% (my original setting), no one can
> access any of the spool file info which the WRKCGISPLF loads up.

That means that the server's userid (typically QTMHHTP1) doesn't have 
*JOBCTL authority.

> When I run with UserID %%CLIENT%%, anyone can access any of the spool
> files which come up.  A general user ID can get the QSECOFR spool files
> to display.

Maybe your general user ID has *JOBCTL authority?  Can that user access 
the spooled files from a normal signon screen?  If so, UserID %%CLIENT%% 
is behaving as designed.

UserID %%CLIENT%% just tells it to run CGI programs with the userid that 
was passed in via basic or digest authentication from the browser.  That 
means that your CGI program should have the exact same authorities as the 
user whose name/pass was keyed into the browser.

I know that our users with *JOBCTL have access to view QSECOFR (or anyone 
else's) spooled files, even if they don't have *ALLOBJ or any other 
special authority level.  I suspect yours are the same.