I have read IBM's Security manual and Work Management manual and I know that *JOBCTL is needed to change job priorities and other things for jobs on the system, but I do not see any statements that say *JOBCTL is needed to view the job logs of other user's jobs on the system. Does anyone know if this is the case? I am going to test it to find the answer, but I would like to know without testing if possible. Thanks for the help.
Software/Hardware used:
ASKED:
July 11, 2005 2:09 PM
UPDATED:
October 25, 2010 4:16 AM
It depends on the security configuration of the outque where your joblogs go. By default this is QEZJOBLOG.
If DSPDTA is *YES, then you could display any spoolfile in the queue. This can be set in combination with AUTCHK(*DTAAUT) which means to check the data authority to the output queue. If you set it this way (using the object authority on QEZDEBUG), you can control who can display job logs.
It’s something you want to consider — who you want to allow to see any job log.
You haven’t quite clarified your question enough. The term ‘joblog’ has at least two very different usages. First, you can view the ‘joblog’ of a running job by using a command such as DSPJOB OPTION(*JOBLOG). And second, you can view the spooled file named QPJOBLOG that is created when a job ends and the job attributes are set to create that spooled file.
The two need not contain the same items and authorities may be very different for viewing one or the other.
Tom
Assuming that the question is about displaying an active job’s joblog, the restriction is documented in the help text for the DSPJOB command itself:
Tom