Is *JOBCTL needed to view job logs?

pts.
Tags:
Backup and Recovery
Hardware
i5
IBM iSeries
Installation
Integration/Connectivity
Logical partitions
OS/400
PC/Windows Connectivity
Performance/Tuning
Printing
PTFs
Security
Server consolidation
System monitoring
tips and tricks
Tools
I have read IBM's Security manual and Work Management manual and I know that *JOBCTL is needed to change job priorities and other things for jobs on the system, but I do not see any statements that say *JOBCTL is needed to view the job logs of other user's jobs on the system. Does anyone know if this is the case? I am going to test it to find the answer, but I would like to know without testing if possible. Thanks for the help.

Answer Wiki

Thanks. We'll let you know when a new response is added.

You can view your own joblog without it, but must have that authority in order to see *someone elses* joblog, yes.

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • TheQuigs
    It depends on the security configuration of the outque where your joblogs go. By default this is QEZJOBLOG. If DSPDTA is *YES, then you could display any spoolfile in the queue. This can be set in combination with AUTCHK(*DTAAUT) which means to check the data authority to the output queue. If you set it this way (using the object authority on QEZDEBUG), you can control who can display job logs. It's something you want to consider -- who you want to allow to see any job log.
    0 pointsBadges:
    report
  • TomLiotta
    You haven't quite clarified your question enough. The term 'joblog' has at least two very different usages. First, you can view the 'joblog' of a running job by using a command such as DSPJOB OPTION(*JOBLOG). And second, you can view the spooled file named QPJOBLOG that is created when a job ends and the job attributes are set to create that spooled file. The two need not contain the same items and authorities may be very different for viewing one or the other. Tom
    125,585 pointsBadges:
    report
  • TomLiotta
    Assuming that the question is about displaying an active job's joblog, the restriction is documented in the help text for the DSPJOB command itself:
    • The issuer of the command must be running under a user profile which is the same as the job user identity of the job being displayed, or the issuer of the command must be running under a user profile which has job control (*JOBCTL) special authority.
    Tom
    125,585 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following