HP 3000 Manuals HP 3000 Manuals
DISALLOW
Prohibits access to a specific operator command.
Syntax
DISALLOW FILE=formaldesignator[;SHOW] DISALLOW
[@.@ ]
[user.@ ];COMMANDS=command[,command,...]
[@.acct ]
[user.acct]
Parameters
formal- designator An ASCII file name, which may consist of one to
eight alphanumeric characters, beginning with an
alphabetic character. It may be fully or partially
qualified and may be back-referenced in a file
equation.
SHOW Lists input lines on $STDLIST.
@.@ Prohibits access to all users whether logged on or
not.
user.@ Prohibits access to a specific user in all
accounts.
@.acct Prohibits access to all users in a specific
account.
user.acct Prohibits access to a specific user in a specific
account.
command The names of those commands to which the user is
prohibited access.
Operation Notes
The operator uses the DISALLOW command to prohibit a user from executing
specific operator commands previously allowed with the ALLOW command.
You can use the command in any of three ways:
* Direct mode, in which you enter specific user names and account
and the list of prohibited commands directly at the console.
* Indirect mode, in which you use a text editor such as EDIT/3000 to
create a file that contains the user name and account of those
users who will be prohibited from executing certain operator
commands, and a list of disallowed commands.
* Subsystem mode, in which you enter the DISALLOW command, press
Return, and, at the ">" prompt, enter the user and account names
and the list of prohibited commands.
See the "Examples" section for more information.
You may enter as many prohibited commands as you want, in any of the
three modes. However, in direct mode and subsystem mode, DISALLOW acts
to prohibit the first nineteen commands and ignores any additional
commands you may have specified. To disallow more than nineteen
commands, create a file that contains the necessary information and
specify it on the command line (i.e. "Indirect mode").
NOTE Do NOT confuse operator commands with console commands. For a
description of the difference between console and operator commands
refer to the ALLOW command. The commands which may be disallowed
are the same as the commands which may be allowed. Refer to the
ALLOW command for a list of commands which may be allowed.
Use
This command may be issued from a session, job, program, or in BREAK.
Pressing Break will terminate subsystem mode and produce an error message
but has no effect on commands already entered in subsystem mode. This
command may be used only from the console unless distributed to users
with the ALLOW command.
Examples
To prohibit the user USER.TECH from executing the REPLY and ABORTIO
commands, enter the following at the system console:
DISALLOW USER.TECH;COMMANDS=REPLY,ABORTIO
To use subsystem mode to prohibit the user MGR.MANUALS from executing the
BREAKJOB command, enter the following at the system console:
DISALLOW
>MGR.MANUALS;COMMANDS=BREAKJOB
>EXIT
:
To use indirect mode, you create a file with all of the necessary
information, and then invoke the changes by specifying the file using the
FILE= parameter of the DISALLOW command.
EDITOR
HP32201A.07.17 EDIT 3000 TUE, MAY 29, 1987, 5:08 PM
(C) HEWLETT-PACKARD CO. 1985
/ADD
1 SUSAN.PAYROLL;COMMANDS=ALTJOB,ALTSPOOLFILE
2 JOHN.ACCTNG;COMMANDS=ALTSPOOLFILE,DELETESPOOLFILE
3 //
...
/KEEP COMNDTMP
/E
DISALLOW FILE=COMNDTMP;SHOW
If you want MPE/iX to display each command line as it is executed from
the file, inclue the SHOW parameter.
You may backreference the file with a file equation as follows:
FILE BACKF=COMNDTMP
DISALLOW FILE=*BACKF;SHOW
If the file has a lockword it may be inserted as follows:
DISALLOW FILE=COMNDTMP/LOCKWORD;SHOW
Related Information
Commands ALLOW, SHOWALLOW
Manuals Performing System Operation Tasks (32650-90137)