Since Kevin mentioned he has streamx and mpex he could remove the 'OP' cap
and if the user needs to see spoolfiles, or streamx jobs that store
database, etc. he could take advantage of the $WITHCAPS-PERMIT and $nopass
options used by the streamx.
The $withcaps can be used with command files.

-----Original Message-----
From: Donna Garverick [mailto:[log in to unmask]]
Sent: Tuesday, April 01, 2003 10:17 AM
To: [log in to unmask]
Subject: Re: [HP3000-L] HIPRI access restrictions


Keven Miller wrote:

> Remove the OP capability from the user.

that won't necessarily slow them down.  the system will 'helpfully' say
something about 'not allowed to use hipri...switching in inpri=13'....

> But then the question is, why do they have OP?
> OP gives the ;HIPRI feature, as well as access to several
> spooling commands.

don't get me started on mpe's security matrix...of course, there's no point
anymore <sigh>  if the user needs to be able to store a database, they have
to
have 'op' capabilty....    - d

--
Donna Garverick     Sr. System Programmer
925-210-6631        [log in to unmask]

Come, my friends, 'Tis not too late to seek a newer world.
Tho' much is taken, much abides; and tho'
We are not now that strength which in old days
Moved earth and heaven, that which we are, we are.
"Ulysses", A. Tennyson

>>>MY opinions, not Longs Drug Stores'<<<

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *