Administering Security › Command Authority Levels

Command Authority Levels

Product commands and VTAM commands that your product can execute are each assigned a default authority level. These levels are within the range of 0 to 255.

Users of your product region are also allocated a command authority level. This level is in their user ID definition. The authority level set corresponds to the authority level for the commands they are authorized to issue.

Change Command Authority Levels

To allocate a different command authority to a particular command, use the SYSPARMS CMDAUTH operand.

Example:

To allocate a command authority of 5 to the CANCEL command, enter the following command:

SYSPARMS CMDAUTH=(CANCEL,5)

Disable Commands

To disable a command, allocate an authority level higher than the level available to any user.

Replace Commands with NCL Procedures

To replace native commands with an NCL procedure of the same name, use the CMDREPLS parameter group in Customizer.

Example: Replace the CANCEL Command

To run an NCL procedure in place of the CANCEL command

1. Enter /PARMS at the command prompt.

   The Customizer : Parameter Groups panel is displayed.

2. Enter U next to the CMDREPLS parameter group.

   The Customizer : Parameter Group panel for the CMDREPLS parameter group is displayed.

3. Type CANCEL in the next available position in the Replaced Command ID field.
4. Press one of the following function keys:
   • F3 (File) to file the changes—the changes are not applied to the current region, but are applied when the region is restarted.
   • F6 (Action) to apply the changes to this region—the changes are not saved.

Note: This rest of Administering Security does not apply to CA SOLVE:FTS, CA SOLVE:Access, CA SOLVE:InfoMaster, and CA SOLVE:NetMail.