We just went live on 10.0.9, (coming from 9.01) and have only been on LSA for a few months, so we are still in learning mode. For the most part though, we are stable. I have very few security changes now so looks like everyone is working correctly.
A user (payroll supervisor) called me yesterday and said that she noticed that she could submit another user's job. I asked if she had been able to do that in 9.0.1, and she said she really had never tried it. Well I just tried it on the old system, and me and my coworker could submit each other's jobs. But, WE have admin rights. I have always made use of the ability to view others jobs and reports, as a system admin - it would make troubleshooting much more difficult if I could not. But I never even considered trying to run another user's job. And this PR superviser, she also looks at others print files, routinely, so I would not want to take that right away. But submitting other's jobs - I think that's probably something we need to disable, if possible. How have others tacked this?
