|
Users can see and work with spooled files based on how the output queue
was created as well as whether they have *JOBCTL or *SPLCTL special
authority. *SPLCTL is the equivalent of *ALLOBJ only for spooled files.
They can work with all spooled files on the system -- not usually the
scope most organizations want to give their operators. To understand
how *JOBCTL works with the outq attributes, check out the iSeries
Security Reference manual, Chapter 6 or my book Implementing AS/400
Security - Chapter 6. Both books have a table that explains the
settings. Use the OS/400 command Print Queue Authority (PRTQAUT)
command to list the outqs and their security attributes.
One last thing. Do you realize the power you are giving your Operators?
If you do and it's the business decision that you are making, that's
fine. Giving Operators *IOSYSCFG gives them the capability to configure
all aspects of communications, including changing the configuration of
TCP/IP servers, etc. Giving them *SECADM gives them the capability to
create user profiles and then manage those profiles.
|
