iSeries User used to execute Queries

We are trying to lock down a database that is now archive. I always thought that the System User that is setup with the JDE User is the user that is used for determining data authorities. However, we found out that even though the system user is used for some system queries, the user that queries and updates PRODDTA data is ONEWORLD.

In the case below, we setup JDE user TESTRO and assigned it system user JDERO and setup that user on the iSeries. We turned on SQL monitoring and were surprised to see that ONEWORLD performs the queries, not the system user. This does make some sense because JDENET_K call object kernels are started with the ONEWORLD user and the QSQSRVR jobs that run the queries adopt the user from the kernel job.