Domain: | SECURITY-ADMINISTRATION |
Privileges: | GUARD-ADMINISTRATION, TSOS |
This function is used to remove user or group IDs from a user ID guard.
If no further IDs are left in the user ID guard then the entire guard is deleted.
REMOVE-DEFAULT-PROTECTION-UID(REM-DEF-PRO-U) | ||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||
GUARD-NAME = <filename 1..24 without-gen-vers with-wild(40)>
This operand designates the name of a guard of type DEFPUID from which the user IDs or group IDs are to be deleted. The length of the name without wildcards, catalog ID and user ID must not exceed 8 characters.
Only a guard administrator can specify wildcards in the user ID.
If wildcards are used in the name of a guard, then a single command deletes the user IDs or group IDs from multiple guards provided that these are accessible.
The specification of the system default ID in the guard name, e.g. $<filename> or $.<filename>, is not supported.
USER-IDENTIFICATION =
Specifies the user or user group IDs which are to be removed from the guard.
USER-IDENTIFICATION = list-poss(20): <name 1..8 with-wild(20)>
Names of the user IDs.
Example
/add-default-protection-uid ...,user-id=(a*,abc,ax)
/remove-default-protection-uid ...,user-id=a*
The entries USER-ID=(ABC,AX) are not deleted.
USER-IDENTIFICATION = list-poss(20): *GROUP(...)
Specifies a user group as a set of user IDs.
GROUP-IDENTIFICATION =
Name of a user group.
GROUP-IDENTIFICATION = *UNIVERSAL
The name of the user group is *UNIVERSAL.
GROUP-IDENTIFICATION = <name 1..8 with-wild(20)>
User group.
DIALOG-CONTROL =
The user can use the command in a guided dialog and can define the type of dialog that is to be performed. Dialog control has no effect in batch mode and thus corresponds to the setting DIALOG-CONTROL=*NO.
DIALOG-CONTROL = *STD
For each selected user ID guard, the user can decide in interactive mode whether or not the command should be executed. However, dialog control is only performed if the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
DIALOG-CONTROL = *NO
The command is executed for every selected user ID guard without any query being issued.
DIALOG-CONTROL = *GUARD-CHANGE
For each selected user ID guard, the user can decide in interactive mode whether or not the command should be executed. Dialog control is performed regardless of whether or not the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
DIALOG-CONTROL = *USER-ID-CHANGE
This guided dialog can only be used by guard administrators.
For each selected user ID, a guard administrator can decide in interactive mode whether or not the command should be executed. However, dialog control is only performed if the user ID in the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
DIALOG-CONTROL = *CATALOG-CHANGE
For each selected catalog ID, the user can decide in interactive mode whether or not the command should be executed. However, dialog control is only performed if the catalog ID in the name of the user ID guard is specified using wildcards.
It is possible to abort the command.
Command return codes
(SC2) | SC1 | Maincode | Meaning |
0 | CMD0001 | Command successfully executed | |
2 | 0 | DEF3000 | The command was aborted at the user’s request. |
2 | 0 | DEF3010 | A user ID guard was deleted because it contained no further user IDs. |
2 | 0 | DEF3011 | During the processing of user ID guards, one or more user ID guards were deleted because they contained no further user IDs. |
2 | 0 | DEF3012 | During the processing of user ID guards specified using wildcards, it was not possible to process all the selected user ID guards correctly. |
2 | 0 | DEF3013 | During the processing of user ID guards specified using wildcards, it was not possible to process all the selected user ID guards correctly and one or more user ID guards were deleted. |
1 | DEF3100 | An incorrect operand value was detected. | |
32 | DEF3200 | An internal error has occurred. A SERSLOG entry has been generated to permit detailed analysis. | |
64 | DEF3302 | The user is not authorized to execute the function. | |
64 | DEF3306 | A specified guard is not of the required guard type. | |
64 | DEF3308 | A user ID is unknown. | |
64 | DEF3309 | Remote file access not supported. | |
64 | DEF3313 | A specified public volume set is not available. | |
64 | DEF3314 | Error in MRS communications resources. | |
64 | DEF3315 | A specified public volume set is not known in the local GUARDS administration. | |
64 | DEF3400 | The specified user ID guard does not exist. | |
64 | DEF3402 | No user ID guard corresponds to the specified selection criteria. | |
64 | DEF3404 | The specified user ID was not found in the user ID guard. | |
128 | DEF3900 | There is no longer sufficient system storage space available. | |
128 | DEF3901 | A guard which has to be processed is currently locked by another task and cannot be processed at the present time. | |
128 | DEF3902 | A guard is temporarily unavailable because the GUARDS catalog is being changed or a master change is taking place in the computer network. |