XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix C: The ACACL File
XYPRO Technology Corporation 189 Proprietary and Confidential
C49: MULTIPLECOMMANDSEP
This keyword is used to specify to XAC the character used by the OBJECT program to
separate multiple commands on a single line. MULTIPLECOMMANDSEP <character>
(no quotation marks) allows the correct performance of command scanning for those
utility programs that allow multiple commands per line. This keyword should be used
with the FC, FC#, FC?, ALIAS, ALLOWCMD, and DENYCMD keywords.
Syntax:
MULTIPLECOMMANDSEP <character>
Example:
COMMAND SQLCI-MGR
DESCRIPTION "SQLCI FOR MANAGERS’
USER DEV.MGR
ACL $DEV
OBJECT $SYSTEM.SYSTEM.SQLCI
DENYCMD "DELETE"
DENYCMD "DROP"
MULTIPLECOMMANDSEP ;
This example requires MULTIPLECOMMANDSEP so that the DENYCMD can be
applied to all commands strung together in a single input line.
C50: NOASSIGNS
This keyword prevents the passing of assign messages to the started process.
NOASSIGNS prevents a user from circumventing the security of any commands that
use TACL. Because TACL allows an assign to define which TACLCSTM file to execute
at startup, a user could prevent the standard TACLCSTM file from being executed.
With the use of this keyword the user can be required to stay within a TACL macro.
Example:
COMMAND RUN-RESET
DESCRIPTION "TACL TO RUN MACRO RESTATM"
USER SUPER.SUPER
OBJECT $SYSTEM.SYSNN.TACL
ACL TECH.*
INPUT "SET #INFORMAT TACL"
INPUT "XAC_RUN_MACRO RESETATM"
INPUT "#SET #EXIT 1"
NOBREAK NOASSIGNS