Comments on: Is *JOBCTL needed to view job logs?

By: tomliotta

tomliotta — Mon, 25 Oct 2010 04:16:20 +0000

Assuming that the question is about displaying an active job's joblog, the restriction is documented in the help text for the DSPJOB command itself:

The issuer of the command must be running under a user profile which is the same as the job user identity of the job being displayed, or the issuer of the command must be running under a user profile which has job control (*JOBCTL) special authority.

Tom

By: tomliotta

tomliotta — Wed, 13 Jul 2005 13:44:36 +0000

You haven’t quite clarified your question enough. The term ‘joblog’ has at least two very different usages. First, you can view the ‘joblog’ of a running job by using a command such as DSPJOB OPTION(*JOBLOG). And second, you can view the spooled file named QPJOBLOG that is created when a job ends and the job attributes are set to create that spooled file.

The two need not contain the same items and authorities may be very different for viewing one or the other.

Tom

By: thequigs

thequigs — Tue, 12 Jul 2005 08:25:15 +0000

It depends on the security configuration of the outque where your joblogs go. By default this is QEZJOBLOG.

If DSPDTA is *YES, then you could display any spoolfile in the queue. This can be set in combination with AUTCHK(*DTAAUT) which means to check the data authority to the output queue. If you set it this way (using the object authority on QEZDEBUG), you can control who can display job logs.

It’s something you want to consider — who you want to allow to see any job log.