What is the best way to allow this to work?

"Steve McKay" <[email protected]> Wed, 27 Aug 2008 15:50:28 -0500
Newsgroups gmane.comp.systems.as400.security
Organization midrange.com
Message-ID <[email protected]>
I have a user who have no *SPCAUT.  She is trying to run a utility program 
which allocates physical file members.  It runs the following command:

OVRDBF FILE(MBRNAM) FRCRATIO(1) WAITFILE(*IMMED) WAITRCD(*IMMED) SHARE(*NO) 
OVRSCOPE(*CALLLVL)

When the user runs it, she gets a CPF1337 - Cause . . . . . :   &3/&2/&1 is 
not authorized to change either parameters Run priority, Time slice, Purge, 
Time slice end pool, or Default wait time.  Special job control authority is 
required to change the requested parameter(s).  (I suppose that this is due 
to the WAITFILE or the WAITRCD parm.)

>From my point of view, I have 2 choices to make this work - (1) give the 
user *JOBCTL authority by changing either her individual user profile or her 
group profile or (2) change the utility program to adopt authority of a user 
with *JOBCTL authority.  The program itself cannot be changed other than 
perhaps adopting authority.

Are there other options?  What would you do?  Why?

TIA,

Steve


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.