LISTAUTH Command

Reference Guide › Command Reference › LISTAUTH Command

LISTAUTH Command

Use the LISTAUTH command to display all AUTHORIZ CONFIG records about a particular authority or a user ID.

LISTAUTH [userid [authword ...]]  [(TYPE | FIFO | LIFO]

Definitions

userid

Specifies the user ID whose authorizations are to be listed. You can specify a user ID by name if you are authorized to query that user ID, or any of the following variable user IDs:

Userid variable	Userids that LISTAUTH command finds
I	User ID under which you are entering the LISTAUTH command
ANYUSR	Any user, regardless of name (the first one the command finds)
SOMEUSR	Any user, regardless of name (the first one the command finds)
EVERYUSR	All users, regardless of name

The default user ID is I.

authword ...

Specifies a list of authorities to query. You can specify any authority, or any of the following authority variables:

Authority variable	Authorities that LISTAUTH command finds
ANYCMD	Any command or authority for the specified user ID or group
SOMECMD	Any command or authority for the specified user ID or group
EVERYCMD	All commands or authorities for the specified user ID or group
ANYWRD	Any command or authority for the specified user ID or group
SOMEWRD	Any command or authority for the specified user ID or group
EVERYWRD	All commands or authorities for the specified user ID or group

The default for each authority is EVERYWRD.

Note: The default authorization word for the LISTAUTH command is EVERYWRD, while the default authorization word for the MAY command is ANYWRD. These different default values can produce different results for the LISTAUTH and MAY commands, even though their functions are similar.

[TYPE | FIFO | LIFO]: Determines whether to display or stack the GRANT or WITHHOLD configuration file records, if any, that determine whether the use of the command, utility, or screen selection is permitted. TYPE displays the record. FIFO stacks the records in the response in first in, first out order. LIFO stacks the records in the response in last in, first out order.

Description

The LISTAUTH command lets you query the GRANT, LIST, and WITHHOLD records in the AUTHORIZ CONFIG file to determine whether a user ID has a specific authorization and responds by displaying the GRANT and WITHHOLD records that relate to the specified authorization.

The LISTAUTH command is very similar to the MAY command. Both respond to your queries by displaying the GRANT and WITHHOLD records that relate to the specified authorization, but the MAY command also responds by return code.

If you specify fewer authorities than are possible for a particular authorization, the LISTAUTH command treats your request as if you supplied a trailing EVERYWRD. For example, the following commands mean the same: "Can Helen issue all forms of the ADMIN command?":

vmdirect listauth helen admin

vmdirect listauth helen admin everywrd

CA VM:Director searches for authorizations that allow use of all forms of the ADMIN command, and responds with a message like the following:

ACCEPTED BY: GRANT ADMIN MANAGERS TO SUSAN HELEN JOHN

Examples:

To determine the CA VM:Director authorizations JUNIOR has, enter:
```
vmdirect listauth junior
```
To display all authorizations that control the use of the CHANGE command, enter:
```
vmdirect listauth anyusr change
```
To find out if you authorized anyone to change SMITH’s user ID:
```
vmdirect listauth anyusr change smith
```

Note: For information about how to find the final disposition of a user ID’s authorization for a command or function, see the MAY Command.