Default Special Authorities for User QIJS.

When the product Advanced Job Scheduler is installed on the system, the installation process creates a user profile called QIJS. The profile has a user class of *USER, and no special authorities are added to the profile.

If a customer were to modify the user profile QIJS and add special authorities( *ALLOBJ, *AUDIT, *JOBCTL, *SAVSYS, *SECADM, *SPLCTL ) to the QIJS profile, end users could potentially schedule jobs to run under the default user, which is QIJS, and inherit those special authorities during the execution of the job.  This option could potentially allow end users to gain access to objects that they are not authorized to or to be able to perform other system activities that would normally require a special authority.

If these special authorities are needed for a job to run, the 'User' parameter on the scheduled job should be defined with a user that has the required authorities.

Adding special authorities to the QIJS user profile is not recommended and should not be implemented on a system,