Problem:

A user using the WinSpool/400 can access any report even though they didn't have *SPLCTL authority. 
 

Solution:

This can occur in under the following conditions:
  1. The user profile has the *JOBCTL or *SPLCTL authority parameter set on their user profile. If this is the case, remove both authorities from the user profile using the CHGURPRF command.
  2. An output queue was created with the Display Any File (DSPDTA) parameter set to *YES. If an output queue was created with this parameter value set to *YES, any report in the output queue can be downloaded regardless of which user ID created the report. Simply use the CHGOUTQ command to change the DSPDTA parm to *NO for the selected output queue to remove this capability.
  3. An output queue was created with the Operator Controlled (OPRCTL) parameter set to *YES. If an output queue was created with this parameter value set to *YES, any report in the output queue can be downloaded by any user that has the *JOBCTL special authority on their user profile. Simply use the CHGOUTQ command to change the OPRCTL parm to *NO for the selected output queue to remove this capability.

Still have questions? We can help. Submit a case to Technical Support.

Last Modified On: December 10, 2016