Viewing Remote Sessions › Remote Viewer › Securing the Remote Viewer › Security and the Windows Operating System › Command-Level Security for the Merged Msg, AP Msg, and Command Windows

Command-Level Security for the Merged Msg, AP Msg, and Command Windows

The command area that displays on the Merged Msg window, the AP Msg window, and the Command window can be used to issue commands to any automated session. By default, remote access to these windows is unrestricted (FULL permission). If the permission level of any of these windows is either FULL or EXEC, the remote user has the ability to type into the command area of that window. If the command area is in the session command state, the remote user will only be able to submit the session command if this user has at least EXEC permission for the session that is the target for the command. If the permission level for the window containing the command area is VIEW, the remote user will not be able to type into the command area, no matter what permission level is assigned to that user for the target session. This permission level of VIEW also prevents the remote user from using the command area on that window to execute REXX programs or scripts.

Be sure to secure access to these windows by specifying an appropriate permission level for each window containing a command area defined in the session definition set.