Where did the QSYSOPR messages go?
Who answered that inquiry message?
Often we see users answering messages on the QSYSOPR message queue. Sometimes they respond correctly, sometimes they don't. Remember displaying the QSYSOPR message queue to see what has been happening on your system only to see an empty QSYSOPR message queue.
All of us need to secure the QSYSOPR message queue correctly. It is the message console for the entire system.
Users need to be able to send messages to QSYSOPR, but not answer messages. For that they need Data *ADD and *OBJOPR rights to the queue, so give that authority to *PUBLIC.
Operators and Administrators need to be able to respond to inquiry messages. For that they need *USE and Data *ADD authority.
To remove messages requires *USE and Data *DLT authority. So give Data *DLT authority only to those users who should be able to clear the queue or delete messages from the queue.
NOTE: Do not set the authority for any user to AUT(*EXCLUDE). If you do, some jobs will not be able to send a message to QSYSOPR when there is a problem, which will cause more problems.
Links:
[1] http://systeminetwork.com/author/dan-riehl