You can control allows by editing the "securg" file within
securg.data.vesoft.  You can be very open with the allows by giving it to
all or an account, group or person using basic wildcards.

(ps.. could be secureg? I have not used it in a couple of years.)
Craig L. Solomon
Craig L. Solomon                |  541-926-3800
Lund Performance Solutions      |  http://www.lund.com
Lund Consulting Services                |  [log in to unmask]

-----Original Message-----
From:   HP-3000 Systems Discussion [mailto:[log in to unmask]] On Behalf
Of Shawn Gordon
Sent:   Wednesday, April 22, 1998 10:23 AM
To:     [log in to unmask]
Subject:        Re[2]: CHGROUP COMMAND.

I've never heard of disabling certain commands in VESOFT security (and I use
to
work there).  You can restrict anything you want in the security menus, but
there is nothing in security/3000 that does anything with MPE commands in
terms
of trapping, allowing or disallowing.

shawn


______________________________ Reply Separator
_________________________________
Subject: Re: CHGROUP COMMAND.
Author:  [log in to unmask] at Internet-Mail
Date:    4/22/98 10:13 AM


I am surprised that no one mentioned VeSoft's facility for disallowing
certain commands.

You would also want to do something for chdir, as well.

While I like the UDC approach, except for what it does to HELP CHGROUP,
we password certain sensitive groups that the authorized user is home to
(so that they don't need to specify the password, thus granting that
user transparent access). As for the UDC, if you provide no commands for
unauthorized users, they get the prompt back. No message, no error, just
the prompt.