Command Reference › CAN Command (CA VM:Secure only)

CAN Command (CA VM:Secure only)

Use the CAN command to query the CA VM:Secure rules database for authorizations for a user ID. You must have the Rules Facility installed to use this command.

The CAN command syntax and function is identical to the QRULES command. The differences in output are as follows:

• The QRULES command output displays the relevant rule(s) that govern the action, whereas the CAN command responds by return code.
• For query of rules that do not involve an ACIGROUP, the meaning of the output of the QRULES and CAN commands are identical. For query of rules that involve an ACIGROUP, the meaning of the QRULES and CAN commands may not be identical. The QRULES command defaults to the default ACIGROUP in the directory. The CAN command uses the current group setting if the user ID is logged on. If the user ID is not logged on, then the CAN command uses the default ACIGROUP.

The syntax for CAN command is as follows:

CAN userid1 {"ParmA" [("Options"] | "ParmB"}

ParmA:

  AUTOLOG  userid2
| GROUP    groupid
| LINK     userid2 vaddr [linkmode]
| LOGONBY  userid2
| SPOOL    userid2
| STORE    [termaddr]
| TAG      [node]
| TRANSFER userid2
| VALIDATE userid2
| XAUTOLOG userid2
| DIAG88   
| PASSCHNG 
| DIAGD4   

ParmB:

  COUPLE {lanowner lanname | SYSTEM vswitchname}
| DIAL termaddr [dialaddr]
| LOGON termaddr

Options:

GROUP groupname

You can query additional authorizations if CA VM:Schedule is installed on your system and the interface is enabled:

CAN userid1 {"Parms"} ["Options"]

Parms:

  CANCEL userid2 request 
| QUERY userid2 request
| SCHEDULE userid2 request

Options:

GROUP groupname

You can query additional authorizations if CA VM:Tape is installed on your system and the interface is enabled:

CAN userid1 {"Parms"} [("Options"

Parms:

  CATALOG userid2 volser 
| LIST userid2
| LIST SYSTEM "TapeParms"
| MOUNT userid2 "TapeParms" {READ | WRITE}
| MOUNT SYSTEM "TapeParms"  {READ | WRITE} 

TapeParms:

  VOLUME {volser | SCRATCH | FOREIGN}
| DSN datasetname

Options:

GROUP groupname

If CA VM:Tape is sharing a TMC with the CA 1 Tape Management System, you can query authorizations for volumes that were not created on VM through CA VM:Tape:

CAN userid1 {"Parms"} [("Options"

Parms:

  LIST SYSTEM tape
| MOUNT SYSTEM tape { READ | WRITE }

Options:

GROUP groupname