Generated from C.65.00 /SYSADMIN/PUB/MYCICAT last modified on Sun Aug 29 15:08:37 2004
Prohibits access to a specific operator command. (CM)
DISALLOW FILE=formaldesignator[;SHOW] { user.acct } DISALLOW { user.@ };COMMANDS=command[,command,...] { @.acct }
formaldesignator A formal ASCII file name, which may consist of as many as eight alphanumeric characters, beginning with an alphabetic character. SHOW Lists input lines on $STDLIST. @.@ Prohibits access to all users whether logged on or not. user.@ Prohibits access to a specific user in all accounts. @.acct Prohibits access to all users in a specific account. user.acct Prohibits access to a specific user in a specific account.
The operator uses the DISALLOW command to prohibit a user from executing specific console commands previously allowed with the ALLOW command. One form of the command requires you to enter the list of prohibited commands directly at the console. The second form of DISALLOW is the indirect mode, in which you use EDIT/3000 to create a file that contains the user name and account of those users who will be prohibited from executing certain operator commands, and a list of disallowed commands. The procedure is similar to the following example EDITOR HP32201A.07.17 EDIT 3000 TUE, MAY 29, 1987, 5:08 PM (C) HEWLETT-PACKARD CO. 1985 /ADD 1 SUSAN.PAYROLL;COMMANDS=ALTJOB,ALTSPOOLFILE 2 JOHN.ACCTNG;COMMANDS=ALTSPOOLFILE,DELETESPOOLFILE 3 // ... /KEEP COMNDTMP /E Once this file is defined, command input is taken from it rather than from data entered at the console. No continued records are permitted. The DISALLOW command is then executed by entering the following DISALLOW FILE=COMNDTMP;SHOW The ;SHOW parameter directs MPE/iX to display each command line as it is executed from the file. A third form of the command is the subsystem mode. In this case, you need only type the command name, DISALLOW, followed by [Return]. You will then be prompted with a ">", after which you enter command parameters. Subsystem mode ends when an EOF is received (when you begin a line with ''), when you EXIT, or when an error is encountered. This command may be issued from a session, job, program, or in BREAK. Pressing [Break] has no effect on this command. This command may be used only from the console unless it has been distributed to users with the ALLOW command.
To prohibit the user MAC.TECH from executing the REPLY and ABORTIO commands, enter the following on the system console DISALLOW MAC.TECH;COMMANDS=REPLY,ABORTIO To use subsystem mode to prohibit the user MGR.MANUALS from executing the BREAKJOB command, enter the following on the system console DISALLOW >MGR.MANUALS;COMMANDS=BREAKJOB >EXIT
Commands: ALLOW, SHOWALLOW Back to Main Index