Generated from C.65.00 /SYSADMIN/PUB/MYCICAT last modified on Sun Aug 29 15:08:37 2004
Grants a user access to a specific operator command (CM).
ALLOW FILE=formaldesignator[;SHOW]
{@.@ }
ALLOW {user.@ };COMMANDS=command[,command,...]
{@.acct }
{user.acct }
formaldesignator A formal ASCII file name, which may consist of one
to eight alphanumeric characters, beginning with an
alphabetic character.
SHOW Lists input lines on $STDLIST.
@.@ Grants access to all users whether logged on or not.
user.@ Grants access to a specific user in all accounts.
@.acct Grants access to all users in a specific account.
user.acct Grants access to a specific user in a specific
account.
command Specifies the names of those commands to which the
user is granted access.
The operator uses the ALLOW command to distribute specific
operator commands to system users. The ALLOW command
determines which users may execute operator command(s), then
the names of each command they will be allowed to execute.
This command may also be executed in indirect and subsystem
modes. To do this you must create a file that contains
records identifying the user(s) and account(s) to whom you
are allowing operator commands, followed by the list of
commands allowed, such as
EDITOR
HP32201A.07.17 EDIT/3000 TUES, MAY 29, 1987, 5:08 PM
(C) HEWLETT-PACKARD CO. 1985
/ADD
1 SUSAN.PAYROLL;COMMANDS=ALTJOB,ALTSPOOLFILE
2 JOHN.ACCTNG;COMMANDS=ALTSPOOLFILE,DELETESPOOLFILE
3 //
...
/KEEP ALLOWTMP
/E
Then issue the ALLOW command, using the ;SHOW parameter to
display each command line as it is executed from the file.
ALLOW FILE=ALLOWTMP;SHOW
In subsystem mode, enter ALLOW, followed by [Return]. You
will be prompted with a ">". Command parameters are
accepted until an end-of-file is received, or until you
EXIT.
The operator may ALLOW console capabilities only to users
who are currently logged on to the system, unless the @.@
option of the ALLOW command is used. In this case, all
users are affected, whether or not they are logged on.
Additional capabilities granted to a user last only for the
duration of their current session; once the user logs off,
any special capabilities previously assigned are no longer
applicable.
The user command SHOWALLOW indicates which operator
commands have been allowed globally and to which specific
user. Refer to SHOWALLOW.
This command can be issued from a session, job, program, or in
BREAK. Pressing [Break] has no effect on this command. It is
executable only from the console unless it is distributed to
users with the ALLOW command.
To give the user MAC.TECH the ability to execute the REPLY
and ABORTIO commands, you would enter the following on the
system console
ALLOW MAC.TECH;COMMANDS=REPLY,ABORTIO
In subsystem mode, to give the user MGR.MANUALS the ability
to execute the BREAKJOB command, you would enter the
following on the system console
ALLOW
>MGR.MANUALS;COMMANDS=BREAKJOB
>EXIT
Commands: DISALLOW, SHOWALLOW Manuals : Performing System Operation Tasks (32650-90137) Back to Main Index