iSeries users do not have *SPLCTL authority but can still view or download AS/400 spool files

 

Problem:

Solution:

1. The user profile has the *JOBCTL or *SPLCTL authority parameter set on their user profile. If this is the case, remove both authorities from the user profile using the CHGURPRF command.
2. An output queue was created with the Display Any File (DSPDTA) parameter set to *YES. If an output queue was created with this parameter value set to *YES, any report in the output queue can be downloaded regardless of which user ID created the report. Simply use the CHGOUTQ command to change the DSPDTA parm to *NO for the selected output queue to remove this capability.
3. An output queue was created with the Operator Controlled (OPRCTL) parameter set to *YES. If an output queue was created with this parameter value set to *YES, any report in the output queue can be downloaded by any user that has the *JOBCTL special authority on their user profile. Simply use the CHGOUTQ command to change the OPRCTL parm to *NO for the selected output queue to remove this capability.