Generated from C.65.00 /SYSADMIN/PUB/MYCICAT last modified on Sun Aug 29 15:08:37 2004
Prohibits access to a specific operator command. (CM)
DISALLOW FILE=formaldesignator[;SHOW]
{ user.acct }
DISALLOW { user.@ };COMMANDS=command[,command,...]
{ @.acct }
formaldesignator A formal ASCII file name, which may consist of as
many as eight alphanumeric characters, beginning
with an alphabetic character.
SHOW Lists input lines on $STDLIST.
@.@ Prohibits access to all users whether logged on or
not.
user.@ Prohibits access to a specific user in all accounts.
@.acct Prohibits access to all users in a specific account.
user.acct Prohibits access to a specific user in a specific
account.
The operator uses the DISALLOW command to prohibit a user
from executing specific console commands previously allowed
with the ALLOW command. One form of the command requires
you to enter the list of prohibited commands directly at the
console. The second form of DISALLOW is the indirect mode,
in which you use EDIT/3000 to create a file that contains the
user name and account of those users who will be prohibited
from executing certain operator commands, and a list of
disallowed commands. The procedure is similar to the
following example
EDITOR
HP32201A.07.17 EDIT 3000 TUE, MAY 29, 1987, 5:08 PM
(C) HEWLETT-PACKARD CO. 1985
/ADD
1 SUSAN.PAYROLL;COMMANDS=ALTJOB,ALTSPOOLFILE
2 JOHN.ACCTNG;COMMANDS=ALTSPOOLFILE,DELETESPOOLFILE
3 //
...
/KEEP COMNDTMP
/E
Once this file is defined, command input is taken from it
rather than from data entered at the console. No continued
records are permitted. The DISALLOW command is then
executed by entering the following
DISALLOW FILE=COMNDTMP;SHOW
The ;SHOW parameter directs MPE/iX to display each command
line as it is executed from the file.
A third form of the command is the subsystem mode. In this
case, you need only type the command name, DISALLOW,
followed by [Return]. You will then be prompted with a ">",
after which you enter command parameters. Subsystem mode
ends when an EOF is received (when you begin a line with
''), when you EXIT, or when an error is encountered.
This command may be issued from a session, job, program, or
in BREAK. Pressing [Break] has no effect on this command.
This command may be used only from the console unless it
has been distributed to users with the ALLOW command.
To prohibit the user MAC.TECH from executing the REPLY and
ABORTIO commands, enter the following on the system
console
DISALLOW MAC.TECH;COMMANDS=REPLY,ABORTIO
To use subsystem mode to prohibit the user MGR.MANUALS from
executing the BREAKJOB command, enter the following on the
system console
DISALLOW
>MGR.MANUALS;COMMANDS=BREAKJOB
>EXIT
Commands: ALLOW, SHOWALLOW Back to Main Index