AS400 Create User Profile Without JOBCTL & SPLCTL

35 pts.
Tags:
AS/400
Hi All
I need to create a AS400 user profile without JOBCTL & SPLCTL assigned,
however the use must able print spool file to printer and copy spool file from iSeries Navigator. that means user need basic function of spool file but not all funciton same as SPLCTL 
does anyone have idea how to do?
Thanks,


Software/Hardware used:
AS400

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Discuss This Question: 8  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TomLiotta
    Users have the authority to manage their own jobs and spooled files. There is no need for a special authority. The special authorities are for users who are in charge of the activities system wide, when those high-level users need to control everyone's jobs and spooled files. A system operator or a manager/administrator might use special authorities. But individual users don't need them for their own work. Tom
    125,585 pointsBadges:
    report
  • 029473
    Hi TomLiotta I have tried assign *none in user's profile then they cannot print spool file to printer and copy spool file from iSeries Navigator. After review the error message in QBATCH, it said user didn't have authority to perform those actions and the issue has fixed after added SPLCTL to user profile so, is it possible have other configuration to control this instead of add SPLCTL?
    35 pointsBadges:
    report
  • TomLiotta
    What was the error message identifier? What is the fully-qualified name of the job that received the error message? What was the fully-qualified name of the job that created the spooled file? What does the "User who created file" show in the spooled file attributes? We need to see elements that determine what actions are allowed before knowing what might be done. Tom
    125,585 pointsBadges:
    report
  • TomLiotta
    After review the error message in QBATCH... How is QBATCH involved? Is this for a batch job running under a different user? Tom
    125,585 pointsBadges:
    report
  • 029473
    Hi Tom since no more those error message prompts again and i did't screen them down, so may not able to provie those identifier to you. yes, it is a batch job running under different user, actually we are using Material Management System(MMS) which are using for pruchasing purpose and installed under AS400. the owner of this system has setup a print queue(MMS Print queue) which will auto send all Purchasing Order to a physical printer then auto print out files for all user who created PR. after i remove their original value *JOBCTL, no file print out from that printer and error message planed into QBATCH, then i assigned *SPLCTL to them then PR successfully auto print out. but according to auditer that it should not assign either *JOBCTL or *SPLCTL to normal user profile, so i am tring to find out a way that will allow user run those batch job but with out *JOBCTL or *SPLCTL assigned. thanks,
    35 pointsBadges:
    report
  • 029473
    Hi Tom I just tried this morning, you are right. user should able to control their spool file and print to any printer. but just unable copy those spool from iSeries which not belongs to the user itself. and also, i got this error this moring: "Not Authorized to output queue OQIBATCH", do you know what it is? another, if there must assign a value "JOBCTL" or "SPLCTL" to user profile which allow current user to copy other users spool from iSeries, which one will be the most less impact to system? thanks,
    35 pointsBadges:
    report
  • TomLiotta
    i got this error this moring: “Not Authorized to output queue OQIBATCH”, do you know what it is? For that, the user hasn't been given authority to the OQIBATCH output queue. If users are going to responsible for spooled files on that output queue, then the users need to have authority for it. You might create an authorization list (CRTAUTL), add the outq to that AUTL, and then add the group profile for the users to that AUTL with *CHANGE authority. If there is no group profile, then each user would need to be added individually. Use GRTOBJAUT or EDTOBJAUT to change authority to the *OUTQ object. it is a batch job running under different user,... If the spooled file is owned by a different user, that would explain why users can't manage the -- the spooled files don't belong to them. the owner of this system has setup a print queue(MMS Print queue) which will auto send all Purchasing Order to a physical printer then auto print out files for all user who created PR. If these are supposed to print automatically, why isn't it happening? Is there no writer started? Do you want users to have a special authority that gives access to all spooled files? Or do you want these spooled files to print automatically? That is, what business problem are you trying to solve? What do you want to happen? Tom
    125,585 pointsBadges:
    report
  • NickHutcheson1
    Here is another idea. Have the batch job copy the spool file (in some format) to a network server. Control access to the server/path with the network user id. Send the user a link to the server to access the report any time they want to. That should really freak out the auditor....
    1,380 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following