Authorize privilege required to modify a batch job scheduled

[Ray Swanson]

The auditors have been here and want to know what is the minimum UAF privilege that a user must possess in order to perturb (ie change the date and time) of a scheduled batch job? We're running OpenVMS V7.2-1.

[John Gillings]

Ray,

From HELP SET ENTRY:

"Requires delete (D) access to the job or manage (M) access to the queue"

So, it's not a UAF privilege. You can grant M access to the queue for an otherwise unprivileged user.

For the auditors, you can also place an audit ACE on the queue:

(AUDIT=SECURITY,ACCESS=MANAGE+SUCCESS)

to track who, when and how entries were modified.

[John Travell]

On V8.2 (and probably most earlier versions) a user does not need elevated privs to modify their own jobs.
Only BYPASS, OPER or SYSPRV allow a user to modify jobs belonging to other users.