...(or user), the profile submitting the job should have the authority. If your security is configured properly, very few users should have *ALLOBJ or *SECADM (only system admins). The user running the job should have security to only the objects needed.
If ALLOBJ is given, the user can submit...