CL Command Reference - PRTJOBDAUT

CL Command List > PRTJOBDAUT Reference

Description:

The Print Job Description Authority (PRTJOBDAUT) command allows you to print a report of the job descriptions in a library that do not have public authority of *EXCLUDE, and a user name is specified in the job description. This is a way to check for job descriptions that every user on the system is authorized to use that allow the user to run as another user profile.

This command will print two reports for a library. The first report (Full Report) will contain all of the job descriptions that do not have public authority of *EXCLUDE and have a user name specified. The second report (Changed Report) will contain the job descriptions that now do not have public authority of *EXCLUDE or have a user name specified that either did have public authority of *EXCLUDE, did not have a user name specified, or did not exist when the PRTJOBDAUT command was previously run for the library. If the PRTJOBDAUT command was not previously run for the library, there will be no *Changed Report*. If the command has been previously run for the library but no additional job descriptions do not have public authority of *EXCLUDE and a user name specified, then the *Changed Report* will be printed but there will be no job descriptions listed. Changes to user profile special authorities will not cause a *Changed Report* to be generated.

The reports will contain the following information:

. The name of the library that was specified on the command.

. The date and time the report was last run (only shown on the Changed Report).

. An entry for each job description that does not have *PUBLIC authority of *EXCLUDE and has a user name specified. Each entry contains the following information:
每 The name of the library the job description is in.
每 The name of the job description.
每 The owner of the job description.
每 The name of the user profile specified in the job description.
每 The special authorities associated with the user profile. The special authorities that are shown are all of the special authorities that would be available when that job description is used. The special authorities shown are the special authorities that the user has, plus the special authorities that the user*s group profiles have (if the user has any groups).

The file QSECJBDOLD in library QUSRSYS contains information from the last time the PRTJOBDAUT command was run for a library. There is a member within the file, with the same name as the library, for each library that has been previously specified on the command. If a special value is specified for the library name (for example, *USRLIBL), then the *** will be replaced with a *Q* in the member name. System file QAOBJAUT in library QSYS with format name of QSYDSAUT is the model file for the QSECJBDOLD file.

Restriction: You must have all object (*ALLOBJ) or audit (*AUDIT) special authority to run this command.


Examples:

PRTJOBDAUT LIB(QGPL)

This command prints both full and changed report for the job descriptions in the library QGPL.