TS/MP Management Programming Manual (G06.24+, H06.03+)

SPI Programming Considerations
NonStop TS/MP Management Programming Manual—540082-001
3-24
Security
The PATHMON process does not provide support for continuing—despite errors—
through the use of the SPI standard token ZSPI-TKN-ALLOW-TYPE. The SPI standard
token ZSPI-TKN-RETCODE contains a nonzero value if the PATHMON process
detects an error in a command message or detects an error when attempting to
perform a command. The Pathway subsystem can also return file-system errors.
For more information on errors, error lists, and nested error messages, see Section 10,
Event Management. For more information about ZSPI-TKN-ERRLIST and ZSPI-TKN-
ENDLIST, see the SPI Programming Manual.
Security
The owner of the user ID that starts the PATHMON process can set the ZOWNER and
ZSECURITY fields in ZPWY-DDL-DEF-PATHWAY during the execution of a START
PATHWAY command to restrict the use of a specific group of commands. Commands
included in this restricted group are those that can directly alter the state of an object.
Table 3-5 lists the restricted commands and their object types:
Table 3-5. Restricted Commands and Objects for TS/MP
To Control…
Use These Restricted (Sensitive)
Commands (ZPWY-CMD- ) and Object Types (ZPWY-OBJ- )…
PATHMON
and
Pathway operations
CONTROL
STOP
SHUTDOWN2
SWITCH
START
PM
PATHWAY
PATHWAY
PM
PATHWAY
SERVER objects ADD SC
SCASSIGN
SCPARAM
SCPROCESS
ZSCSTARTUP
ALTER SC
SCASSIGN
SCPARAM
SCPROCESS
ZSCSTARTUP
DELETE SC
SCASSIGN
SCPARAM
SCPROCESS
ZSCSTARTUP
FREEZE SC