DISALLOW



DISALLOW

     Prohibits access to a specific operator command. (CM)

SYNTAX

     DISALLOW FILE=formaldesignator[;SHOW]

              { user.acct }
     DISALLOW { user.@    };COMMANDS=command[,command,...]
              { @.acct    }


PARAMETERS

formaldesignator    A formal ASCII file name, which may consist of as
                    many as eight alphanumeric characters, beginning
                    with an alphabetic character.

SHOW                Lists input lines on $STDLIST.

@.@                 Prohibits access to all users whether logged on or
                    not.

user.@              Prohibits access to a specific user in all accounts.

@.acct              Prohibits access to all users in a specific account.

user.acct           Prohibits access to a specific user in a specific
                    account.


OPERATION

     The operator uses the DISALLOW command to prohibit a user
     from executing specific console commands previously allowed
     with the ALLOW command.  One form of the command requires
     you to enter the list of prohibited commands directly at the
     console.  The second form of DISALLOW is the indirect mode,
     in which you use EDIT/3000 to create a file that contains the
     user name and account of those users who will be prohibited
     from executing certain operator commands, and a list of
     disallowed commands.  The procedure is similar to the
     following example

     EDITOR
     HP32201A.07.17 EDIT 3000  TUE, MAY 29, 1987,  5:08 PM
     (C) HEWLETT-PACKARD CO. 1985
     /ADD
     1     SUSAN.PAYROLL;COMMANDS=ALTJOB,ALTSPOOLFILE
     2     JOHN.ACCTNG;COMMANDS=ALTSPOOLFILE,DELETESPOOLFILE
     3    //
     ...
     /KEEP COMNDTMP
     /E

     Once this file is defined, command input is taken from it
     rather than from data entered at the console.  No continued
     records are permitted.  The DISALLOW command is then
     executed by entering the following

     DISALLOW FILE=COMNDTMP;SHOW

     The ;SHOW parameter directs MPE/iX to display each command
     line as it is executed from the file.

     A third form of the command is the subsystem mode.  In this
     case, you need only type the command name, DISALLOW,
     followed by [Return].  You will then be prompted with a ">",
     after which you enter command parameters.  Subsystem mode
     ends when an EOF is received (when you begin a line with
     ''), when you EXIT, or when an error is encountered.

     This command may be issued from a session, job, program, or
     in BREAK.  Pressing [Break] has no effect on this command.
     This command may be used only from the console unless it
     has been distributed to users with the ALLOW command.


EXAMPLE(S)

     To prohibit the user MAC.TECH from executing the REPLY and
     ABORTIO commands, enter the following on the system
     console

     DISALLOW MAC.TECH;COMMANDS=REPLY,ABORTIO

     To use subsystem mode to prohibit the user MGR.MANUALS from
     executing the BREAKJOB command, enter the following on the
     system console

     DISALLOW
     >MGR.MANUALS;COMMANDS=BREAKJOB
     >EXIT

ADDITIONAL INFORMATION

Commands:   ALLOW, SHOWALLOW