 |
» |
|
|
|
Prohibits access to a specific operator command. Syntax | |
DISALLOW FILE=formaldesignator[ ;SHOW] |
DISALLOW] [ @.@ user.@ @.user user.acct ] ;COMMANDS=command [ ,command,...] |
Parameters | |
- formal- designator
An ASCII file name, which may consist of one to
eight alphanumeric characters, beginning with an alphabetic character.
It may be fully or partially qualified and may be back-referenced
in a file equation. - SHOW
Lists input lines on $STDLIST. - @.@
Prohibits access to all users whether logged on
or not. - user.@
Prohibits access to a specific user in all accounts. - @.acct
Prohibits access to all users in a specific account. - user.acct
Prohibits access to a specific user in a specific
account. - command
The names of those commands to which the user is
prohibited access.
Operation Notes | |
The operator uses the DISALLOW
command to prohibit a user from executing specific operator commands
previously allowed with the ALLOW
command. You can use the command in any of three ways: Direct mode, in which
you enter specific user names and account and the list of prohibited
commands directly at the console. Indirect mode, in which you use a text editor such
as EDIT/3000 to create a file that contains the user name and account
of those users who will be prohibited from executing certain operator
commands, and a list of disallowed commands. Subsystem mode, in which you enter the DISALLOW
command, press Return, and, at
the ">" prompt, enter the user and account names and the list of
prohibited commands.
See the "Examples" section for more information. You may enter as many prohibited commands as you want, in
any of the three modes. However, in direct mode and subsystem mode,
DISALLOW acts
to prohibit the first nineteen commands and ignores any additional
commands you may have specified. To disallow more than nineteen
commands, create a file that contains the necessary information
and specify it on the command line (i.e. "Indirect mode"). | | | |  | NOTE: Do NOT confuse operator commands
with console commands. For a description
of the difference between console and operator commands refer to
the ALLOW command.
The commands which may be disallowed are the same as the commands
which may be allowed. Refer to the ALLOW
command for a list of commands which may be allowed. | | | | |
Use | |
This command may be issued from a session, job, program, or
in BREAK. Pressing Break will
terminate subsystem mode and produce an error message but has no
effect on commands already entered in subsystem mode. This command
may be used only from the console unless distributed to users with
the ALLOW command. Examples | |
To prohibit the user USER.TECH
from executing the REPLY
and ABORTIO commands,
enter the following at the system console: DISALLOW USER.TECH;COMMANDS=REPLY,ABORTIO |
To use subsystem mode to prohibit the user MGR.MANUALS
from executing the BREAKJOB
command, enter the following at the system console: DISALLOW
>MGR.MANUALS;COMMANDS=BREAKJOB
>EXIT
: |
To use indirect mode, you create a file with all of the necessary
information, and then invoke the changes by specifying the file
using the FILE=
parameter of the DISALLOW
command. EDITOR
HP32201A.07.17 EDIT 3000 TUE, MAY 29, 1987, 5:08 PM
(C) HEWLETT-PACKARD CO. 1985
/ADD
1 SUSAN.PAYROLL;COMMANDS=ALTJOB,ALTSPOOLFILE
2 JOHN.ACCTNG;COMMANDS=ALTSPOOLFILE,DELETESPOOLFILE
3 //
...
/KEEP COMNDTMP
/E
DISALLOW FILE=COMNDTMP;SHOW |
If you want MPE/iX to display each command line as it is executed
from the file, inclue the SHOW
parameter. You may backreference the file with a file equation as follows: FILE BACKF=COMNDTMP
DISALLOW FILE=*BACKF;SHOW |
If the file has a lockword it may be inserted as follows: DISALLOW FILE=COMNDTMP/LOCKWORD;SHOW |
Related Information | |
- Commands
ALLOW,
SHOWALLOW - Manuals
Performing System Operation Tasks
|
