Splctl

What is it?

Spool Control.  Maybe the most misunderstood, *SPLCTL makes the user the 'god' of all spooled files on your system. In fact, as the name spool control indicates, a user with *SPLCTL can control all system spooling functions. This includes controlling not only output queues, but job queues as well. The user may hold, release and clear job queues and output queues, even if they are not authorized to those queues.

What are the main exposures?

*SPLCTL allows the user to view and manipulate ANY spooled file on the system, even if they reside in a secured output queue.  So, even your most confidential reports are wide open to the user.