Domain: | SECURITY-ADMINISTRATION |
Privileges: | GUARD-ADMINISTRATION, TSOS |
This command is used by system administrators or guard administrators to enter user and group IDs in a user ID guard. These IDs qualify the object names more precisely throughout the pubset when default protection rules are defined.
If the user ID guard does not yet exist, it is implicitly created and assigned the guard type DEFPUID. The SCOPE in the guard’s administrative part is set to *USER-ID. If the user ID guard already exists then the SCOPE remains unchanged.
Any number of user and group IDs can be entered. If the condition area is full then no further entries are possible.
ADD-DEFAULT-PROTECTION-UID (ADD-DEF-PRO-U) | ||||||||||||||||||||
| ||||||||||||||||||||
GUARD-NAME = <filename 1..24 without-gen-vers with-wild(40)>
This operand designates the name of a guard of type DEFPUID in which the user IDs and user groups are to be entered. The name is user-definable. However, its length without wildcards, catalog ID and user ID must not exceed 8 characters. If the guard does not yet exist, it is created.
If wildcards are used in the name of the guard, by issuing a single command you can enter the user IDs in a number of guards.
Only a guard administrator can specify wildcards in the user ID.
The specification of the system default ID in the container name, e.g. $<filename> or $.<filename>, is not supported.
USER-IDENTIFICATION = list-poss(20)
Specification of the user or user group IDs which are to be entered in the guard.
USER-IDENTIFICATION = list-pos(20): <name 1..8 with-wild(20)>
Names of the user IDs.
USER-IDENTIFICATION = list-poss(20): *GROUP(...)
Specification of a user group as a set of user IDs.
GROUP-IDENTIFICATION =
Name of a user group
GROUP-IDENTIFICATION = *UNIVERSAL
The name of the user group is *UNIVERSAL.
GROUP-IDENTIFICATION = <name 1..8 with-wild(20)>
User group
DIALOG-CONTROL =
The user can use the command in a guided dialog and can define the type of dialog that is to be performed. Dialog control has no effect in batch mode and thus corresponds to the setting DIALOG-CONTROL=*NO.
DIALOG-CONTROL = *STD
For each selected user ID guard, the user can decide in interactive mode whether or not the command should be executed. However, dialog control is only performed if the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
DIALOG-CONTROL = *NO
The command is executed for every selected user ID guard without any query being issued.
DIALOG-CONTROL = *GUARD-CHANGE
For each selected user ID guard, the user can decide in interactive mode whether or not the command should be executed. Dialog control is performed independently of whether or not the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
DIALOG-CONTROL = *USER-ID-CHANGE
This guided dialog can only be used by guard administrators.
For each selected user ID, the system administrator can decide in interactive mode whether or not the command should be executed. However, dialog control is only performed if the user ID in the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
DIALOG-CONTROL = *CATALOG-CHANGE
For each selected catalog ID, the user can decide in interactive mode whether or not the command should be executed. However, dialog control is only performed if the catalog ID in the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
Command return codes
(SC2) | SC1 | Maincode | Meaning |
0 | CMD0001 | Command successfully executed | |
2 | 0 | DEF3000 | The command was aborted at the user’s request |
2 | 0 | DEF3012 | During the processing of user ID guards specified using wildcards, it was not possible to process all the selected user ID guards correctly. |
1 | DEF3100 | An incorrect operand value was detected. | |
32 | DEF3200 | An internal error has occurred. A SERSLOG entry has been generated to permit detailed analysis. | |
64 | DEF3302 | The user is not authorized to execute the function. | |
64 | DEF3306 | A specified guard is not of the required guard type. | |
64 | DEF3308 | A user ID is unknown. | |
64 | DEF3309 | Remote file access not supported. | |
64 | DEF3313 | A specified public volume set is not available. | |
64 | DEF3314 | Error in MRS communications resources. | |
64 | DEF3315 | A specified public volume set is not known in the local GUARDS administration. | |
64 | DEF3402 | No user ID guard corresponding to the selection criteria. | |
64 | DEF3403 | A user ID to be entered is already present in the user ID guard. | |
64 | DEF3406 | No further user IDs can be entered in the user ID guard. | |
128 | DEF3900 | There is no longer sufficient system storage space available. | |
128 | DEF3901 | A guard which has to be processed is currently locked by another task and cannot be processed at the present time. | |
128 | DEF3902 | A guard is temporarily unavailable because the GUARDS catalog is being changed or a master change is taking place in the computer network. |