XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix C: The ACACL File
XYPRO Technology Corporation 169 Proprietary and Confidential
C23: CMONIGNORECPU
This keyword tells XAC to ignore the CPU selected by $CMON, and use the CPU in
which the XYGATEAC process is running.
Example:
COMMAND TACL-255
DESCRIPTION "TACL as SUPER.SUPER"
USER 255,255
OBJECT $SYSTEM.SYSNN.TACL
ACL TECH.*
START_LOGGED_ON
NULLNULLSTOP
TRACKUSERID
OPENSBYOBJECTS $*.*.*
CMONIGNORECPU
This example will permit the user executing TACL-255 to choose the CPU in which to
start programs without regard to $CMON.
C24: DENYCMD
This keyword prevents the use of one or more commands within the program running
under the XYGATEAC process’s control. DENYCMD controls startup commands,
commands input using FILE or OBEY, as well as XAC’s internal commands
(commands prefixed with the XYGATEAC "escape" character, such as >CONFIG, >X,
>RUN, etc.). This allows the XAC ACACL Command Entry to permit or restrict access
to the XAC internal commands as well as the object program commands. ALLOWCMD
entries and DENYCMD entries can be mixed to provide the desired level of command
security.
DENYCMD command matching occurs in the order in which the ALLOWCMD and
DENYCMD entries are specified.
Note: The order of evaluation of commands is ALIAS, %parameters, FKEY,
ALLOWCMD / DENYCMD, COMMANDESC and RUNCHECK. All ALLOWCMD
entries and DENYCMD entries are processed after ALIAS substitutions and
%parameters. ALLOWCMD and DENYCMD entries are processed in the order
in which they are encountered.
Syntax:
DENYCMD "<command>"
Example:
COMMAND FUP-SUPER
DESCRIPTION "FUP AS SUPER.SUPER"
USER 255,255
ACL $OPER
FC# FCPROMPT "-"
OBJECT $SYSTEM.SYSNN.FUP
DENYCMD "LICENSE"