Prev
Next
Forums Infor / Lawson Platforms S3 Security

Prohibit Job Submission

 2 Replies
 2 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
Gina
Posts: 5
2/17/2015 8:17 PM

    Hello,

    I am looking for a way to prohibit IT Support Users from submitting batch jobs in the production environment.  These users still need the ability to view job queues and manage jobs submitted by others.  They also need to be authorized to the programs so that they can setup or maintain job defintions and job schedules (recdef).  But just not submit any jobs themselves.  I have tried denying them access to the job queues, but that was too restrictive as they could not even look at jobs subitted by others.  Then I tried denying them access to jbsubmit and jqsubmit, which seems logical to me...but it did not work.  Right now wtsubmit is not defined to LSA, so I think that is the same as these users being denied access to it.  Does anyone out there have any other ideas for me to try?

    I would be ever so grateful for any assistance you may be able to provide!

    Thanks,

    Gina

    Todd Mitchell
    Veteran Member
    Posts: 87
    Veteran Member
    2/17/2015 8:52 PM
      I am not the security admin anymore but I believe we handle this with the Data Level security by allowing Inquiry only to the Data files. However, as an admin I would still be able to run a inquiry only batch job but not an update type batch job.

      Ari
      Veteran Member
      Posts: 49
      Veteran Member
      2/18/2015 12:34 AM
        If you secure the GEN Productline, then you can write a conditional rule against the QUEUEDJOB Table in the Batch Class in the GEN Profile so that the selected users cannot submit jobs.(In this case the denyingType 'A' to selected users would not allow them to submit.)