It is the task of the system administration to decide which users are to be granted access to which SHOW commands in accordance with the applicable requirements. The CREATE-DISPLAY-CMD command is used for this purpose. The system administration can use this command to create DISPLAY commands. A DISPLAY command is by default a copy of the SHOW command with the corresponding name, e.g. the DISPLAY-FILE-ATTRIBUTES command is a copy of the SHOW-FILE-ATTRIBUTES command. However, for the DISPLAY command the system administration can define which privileges permit its use and thus the output of the entire data set. By default DISPLAY commands are entered in the syntax file SYSSDF.DISPLAY.nnn which is supplied with the DISPLAY subsystem, but the system administration can also specify any other syntax file.
As DISPLAY commands are generally copies of SHOW commands, they must be created again each time the corresponding SHOW command is modified, e.g. after a change of version or a change to the command with SDF-A. You are therefore recommended to save the commands for generating DISPLAY commands as a procedure. This facilitates reconstruction after a version update.
Behavior of a DISPLAY command (DISPLAY-...) compared to that of the corresponding SHOW command
(SHOW-...):
Text output to SYSOUT or SYSLST is identical to the output which the corresponding SHOW command supplies when it is called under a user ID with the privileges TSOS and PRINT-SERVICE-ADMINISTRATION.
During normal execution the return code and the spin-off behavior are the same as with the corresponding SHOW command. If internal errors occur during execution, the following command return code is generated:
(SC2)
Maincode
Meaning
32
DSP0001
Internal error
A DISPLAY command generates no output to the S variable stream SYSINF. The structured output to an S variable must be requested explicitly using the
/EXECUTE-CMD CMD=(DISPLAY-...), STRUCT-OUT=... command.
Modifying DISPLAY commands
The system administration can process DISPLAY commands retroactively with SDF-A. This permits the functionality to be restricted compared to the corresponding SHOW command or operands or values to be released whose use is restricted in the SHOW command.
The following actions are permitted:
Deleting optional operands
Optional operands of a DISPLAY command can be deleted completely. Internally the operands are assigned the default value which applies for the SHOW command.Changing the privileges of operands and operand values:
Individual privileges can be assigned to individual operands and operand values to restrict their use to particular users.
As long as a permitted input option is retained for all users, the standard privileges of an operand or operand value can be restricted as required. However, they may only be extended if they were previously assigned one of the privileges TSOS or PRINT-SERVICE-ADMINISTRATION.Changing the default values
As long as syntax rules are observed, the default values for DISPLAY commands can be deleted (i.e. entry of the operand concerned becomes mandatory), modified or (re)introduced (i.e. entry of the operand which was previously mandatory becomes optional).Restricting the value range:
The permitted value range of an operand can be restricted by deleting or changing the default options (e.g. wildcards not permitted in the file name).In particular, general data types can be replaced by a list of values which are actually allowed (e.g. data type <name 1..8> for a user ID by the user IDs X, Y and Z for which the command is to be permitted).
Notes
If the SHOW command’s operand(s) and/or value(s) require specific privileges, to avoid error SDA0601 those privileges should be included in the list of privileges under the operand PRIVILEGE. If it is essential that the created DISPLAY command is excluded for those privileges, they can be removed with SDF-A after removing the
operand(s) and/or value(s) that require them.
Example:
/CREATE-DISPLAY-CMD CMD=SHOW-USER-STATUS,PRIVILEGE=(TSOS,STD-PROCESSING)
…
/START-SDF-A
//OPEN-SYNTAX-FILE FILE=SYSSDF.DISPLAY.210,TYPE=*SYSTEM,MODE=*UPDATE
//EDIT OBJECT=*COMMAND(NAME=DISPLAY-USER-STATUS)
//REMOVE OBJECT=*OPERAND(OPERAND-L1=CATEGORY-NAME)
//MODIFY-CMD-ATTRIBUTES NAME=DISPLAY-USER-STATUS,PRIVILEGE=*REMOVE(REMOVE-PRIVILEGE=TSOS)
//END