Restricting Access to Joblog Monitoring Task INGTJLM
The task INGTJLM processes JES spool output data sets. It runs under the NetView user ID.
For this reason, the NetView user ID must have read access to the data sets being monitored. However, the permission allows all NetView users to read the spool data, even sensitive data, using the INGJLM command unless the command is restricted. Use the NetView command authorization table (see below) or the equivalent SAF command authorization to restrict the parameters START, STOP, and SUSPEND.
PROTECT *.*.INGJLM.START
PROTECT *.*.INGJLM.STOP
PROTECT *.*.INGJLM.SUSPEND
PERMIT grpx *.*.INGJLM.START
PERMIT grpx *.*.INGJLM.STOP
PERMIT grpx *.*.INGJLM.SUSPEND