Displaying the status of jobs (LIST and NLST)

No security checks are made when returning information to the user on an NLST or LIST (DIR, MGET, or MDELETE) command that has a wild card character of * or ? for a jobid. The filter variables were reset when the user connection was made. Any attempts to change them caused the appropriate security check to be made.

When a user issues a DIR command for a specific jobid, a check for READ access to JESSPOOL resource nodeid.userid.jobname.jobid is made. This check is performed to prevent a different user (one who happens to know a jobid of another user's job) from obtaining status information, even though the user was not allowed to filter on OWNER. If a user is not allowed READ access, the following reply is sent:

550 RETR fails: nodeid.ownerid.jobname.jobid. User not authorized.