81 lines
5.6 KiB
HTML
81 lines
5.6 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="concept" />
|
|
<meta name="DC.Title" content="Job user identity" />
|
|
<meta name="abstract" content="The job user identity (JUID) is the name of the user profile by which this job is known to other jobs. This name is used for authorization checks when other jobs attempt to operate against this job." />
|
|
<meta name="description" content="The job user identity (JUID) is the name of the user profile by which this job is known to other jobs. This name is used for authorization checks when other jobs attempt to operate against this job." />
|
|
<meta name="DC.Relation" scheme="URI" content="rzaksjobcharacter.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzakspropauth.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2004-2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004-2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="rzaksjobuseridentity" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Job user identity</title>
|
|
</head>
|
|
<body id="rzaksjobuseridentity"><a name="rzaksjobuseridentity"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Job user identity</h1>
|
|
<div><p>The <dfn class="term">job user identity (JUID)</dfn> is the name of the user
|
|
profile by which this job is known to other jobs. This name is used for authorization
|
|
checks when other jobs attempt to operate against this job. </p>
|
|
<p>Some examples of functions that operate against another job include the
|
|
Start Service Job (<span class="cmdname">STRSRVJOB</span>) command, the Retrieve Job
|
|
Information (QUSRJOBI) API, the Change Job (QWTCHGJB) API, all job control
|
|
commands, and functions that send signals from one job to another.</p>
|
|
<p>In situations where jobs swap user profiles, the current user profile identifies
|
|
the profile under which the initial thread is running instead of the JUID.</p>
|
|
<p>The JUID is not used to make authorization checks from within
|
|
a job. Authorization to perform a function is always based on the current
|
|
user profile of the thread in which the function is called.</p>
|
|
<p>When a job is on a job queue or output queue, the JUID is always the same
|
|
as the user name of the job and cannot be changed.</p>
|
|
<p>When a job starts, and at the start of any subsequent routing steps, the
|
|
JUID is the same as the name of the current user profile of the job. While
|
|
a job is active, the JUID can be changed in the following ways.</p>
|
|
<ul><li>The JUID can be explicitly set by an application using the Set Job User
|
|
Identify (QWTSJUID) application program interface (API) or the QwtSetJuid()
|
|
function. The JUID is set with the name of the user profile that the thread
|
|
that called the API or function is running under.</li>
|
|
<li>The JUID can be explicitly cleared by an application using the QWTSJUID
|
|
API or the QwtClearJuid() function. The job must be running as a single threaded
|
|
job at the time. When cleared, the JUID is implicitly set by the system to
|
|
the name of the user profile that the single thread of the job is running
|
|
under at that point.</li>
|
|
<li>If the job is running as a single threaded job, and the JUID has not been
|
|
explicitly set by an application, then each time the job uses the Set Profile
|
|
(QWTSETP) API to run under a different user profile the JUID is implicitly
|
|
set by the system to the name of the user profile that was set by QWTSETP.</li>
|
|
<li>When a single threaded job initiates a secondary thread and the JUID has
|
|
not been explicitly set by an application, then the system will implicitly
|
|
set the JUID with the name of the user profile that the single thread of the
|
|
job was running under at the point that it initiated the secondary thread.<p>When
|
|
the job returns to a single thread, the system implicitly sets the JUID to
|
|
the name of the user profile that the single thread of the job is running
|
|
under at that point.</p>
|
|
</li>
|
|
</ul>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzaksjobcharacter.htm" title="Work management provides a way for you to control the work done on your system through a job's attributes. However, before you can control the various aspects of a job, you need to understand the different characteristics of a job.">Job characteristics</a></div>
|
|
</div>
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
|
<div><a href="rzakspropauth.htm" title="To make most changes to a job's attributes you need to have either job control special authority (*JOBCTL) or your user profile needs to match the job user identity of the job being changed.">Proper authority</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |