8.2.1 Unit owner permission
The JP1 user who defines a job or jobnet has owner permission for that unit. The JP1 user with owner permission can change the name of the JP1 resource group, the owner, and the type of user who can execute jobs (the execution user), regardless of the JP1 permission level. However, if a JP1 resource group without reference permission for that unit is set, even the owner of the unit cannot change the JP1 resource group name, the owner, or the type of job execution user. This is because the Detailed Definition dialog box for the unit cannot be opened in JP1/AJS3 - View. For a unit owner to be able to make these changes, the unit owner needs to change the JP1 resource group, as another JP1 user, to a JP1 resource group for which the unit owner has the view permission.
In addition, if no owner is set for a unit, then any user can change the name of the JP1 resource group, the owner, or the execution user.
If the type of the job execution user is set to User who owns and a JP1 user other than those listed below changes the job owner, the type of the job execution user changes to User who registered:
-
In Windows, a JP1 user mapped to an OS user who is a member of the Administrators group
-
In UNIX, a JP1 user mapped to an OS user who has superuser permission
-
A JP1 user who has the JP1_AJS_Admin permission for the JP1 resource group set for the job
When the execution user is set to User who registered, the job specifies the JP1 user who registered the jobnet for execution as the execution user. This is to prevent an arbitrary user from executing the job at any user permission level.