0 pts.
 Is *JOBCTL needed to view job logs?
I have read IBM's Security manual and Work Management manual and I know that *JOBCTL is needed to change job priorities and other things for jobs on the system, but I do not see any statements that say *JOBCTL is needed to view the job logs of other user's jobs on the system. Does anyone know if this is the case? I am going to test it to find the answer, but I would like to know without testing if possible. Thanks for the help.

Software/Hardware used:
ASKED: July 11, 2005  2:09 PM
UPDATED: October 25, 2010  4:16 AM

Answer Wiki:
You can view your own joblog without it, but must have that authority in order to see *someone elses* joblog, yes.
Last Wiki Answer Submitted:  July 11, 2005  2:25 pm  by  CarterC19   220 pts.
All Answer Wiki Contributors:  CarterC19   220 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

It depends on the security configuration of the outque where your joblogs go. By default this is QEZJOBLOG.

If DSPDTA is *YES, then you could display any spoolfile in the queue. This can be set in combination with AUTCHK(*DTAAUT) which means to check the data authority to the output queue. If you set it this way (using the object authority on QEZDEBUG), you can control who can display job logs.

It’s something you want to consider — who you want to allow to see any job log.

 0 pts.

 

You haven’t quite clarified your question enough. The term ‘joblog’ has at least two very different usages. First, you can view the ‘joblog’ of a running job by using a command such as DSPJOB OPTION(*JOBLOG). And second, you can view the spooled file named QPJOBLOG that is created when a job ends and the job attributes are set to create that spooled file.

The two need not contain the same items and authorities may be very different for viewing one or the other.

Tom

 110,135 pts.

 

Assuming that the question is about displaying an active job’s joblog, the restriction is documented in the help text for the DSPJOB command itself:

  • The issuer of the command must be running under a user profile which is the same as the job user identity of the job being displayed, or the issuer of the command must be running under a user profile which has job control (*JOBCTL) special authority.

Tom

 110,135 pts.