75 lines
4.3 KiB
HTML
75 lines
4.3 KiB
HTML
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
|
|
<html>
|
||
|
|
<head>
|
||
|
|
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
|
||
|
|
<LINK rel="stylesheet" type="text/css" href="../../../rzahg/ic.css">
|
||
|
|
|
||
|
|
<title>Revoke authority to an instance</title>
|
||
|
|
</head>
|
||
|
|
|
||
|
|
<BODY>
|
||
|
|
<!-- Java sync-link -->
|
||
|
|
<SCRIPT LANGUAGE="Javascript" SRC="../../../rzahg/synch.js" TYPE="text/javascript"></SCRIPT>
|
||
|
|
|
||
|
|
<h4><a name="qshrvkauth"></a>Revoke authority to an instance</h4>
|
||
|
|
|
||
|
|
<p>You can use the rvkwasaut script in Qshell to revoke authority to objects and directories in an instance.</p>
|
||
|
|
|
||
|
|
<p><strong>Authority</strong></p>
|
||
|
|
<p>To run this script, your user profile must have *ALLOBJ authority.</p>
|
||
|
|
|
||
|
|
<p><strong>Usage</strong></p>
|
||
|
|
<p>To run the script, follow these steps:</p>
|
||
|
|
|
||
|
|
<ol>
|
||
|
|
<li><p>On the CL command line, run the STRQSH (Start Qshell) command.</p></li>
|
||
|
|
<li><p>Run the cd command to change to the directory that contains the script:</p>
|
||
|
|
<pre>cd /QIBM/ProdData/WebASE51/ASE/bin</pre></li>
|
||
|
|
<li><p>Run the rvkwasaut script:</p>
|
||
|
|
<pre>rvkwasaut -instance <em>instance</em> -user <em>usrprf</em> | -authlist none</pre>
|
||
|
|
<p>where <em>instance</em> is the instance to which you want are revoking authority, <em>usrprf</em> is the user profile from which you are revoking authority, and <em>authlist</em> is the authorization list from which you are revoking authority. You do not need to specify both the -user and -authlist parameters, but you must specify at least one of them.</p></li>
|
||
|
|
</ol>
|
||
|
|
|
||
|
|
<p><strong>Syntax</strong></p>
|
||
|
|
<p>The syntax of the script is:</p>
|
||
|
|
|
||
|
|
<pre>rvkwasaut -instance <em>instance</em> -user <em>usrprf</em> | -authlist none
|
||
|
|
[ -object <em>path</em> ] [ -recursive ] [ -verbose ] [ -help ]</pre>
|
||
|
|
|
||
|
|
<p><strong>Parameters</strong></p>
|
||
|
|
<p>The parameters of the script are:</p>
|
||
|
|
|
||
|
|
<ul>
|
||
|
|
<li><p><strong>-instance</strong>
|
||
|
|
<br>This is a required parameter. The value <em>instance</em> specifies the name of the instance to which you are revoking authority.</p></li>
|
||
|
|
|
||
|
|
<li><p><strong>-user</strong>
|
||
|
|
<br>The value <em>usrprf</em> specifies the i5/OS user profile from which you are revoking authority. To revoke authority from multiple user profiles, specify all of the user profiles with a single -user parameter. Enclose the list of profiles in double quotation marks ("). For example, to revoke authority from usrprf1 and usrprf2, specify <tt>-user "usrprf1 usrprf2"</tt>. You must specify -user, -authlist, or both.</p></li>
|
||
|
|
|
||
|
|
<li><p><strong>-authlist</strong>
|
||
|
|
<br>The value none specifies that the current authorization list associated with the object should be removed. If you use the -authlist parameter, you must specify the value <em>none</em>. You must specify either -user, -authlist, or both.</p></li>
|
||
|
|
|
||
|
|
<li><p><strong>-object</strong>
|
||
|
|
<br>This is an optional parameter. The value <em>path</em> specifies the subdirectory or partially qualified object name to which you are revoking authority. The instance root is prepended to the value to get the fully-qualified path. If you do not specify this parameter, the default value is the instance root. To revoke authority to multiple objects, you must run the script for each object.</p></li>
|
||
|
|
|
||
|
|
<li><p><strong>-recursive</strong>
|
||
|
|
<br>This optional parameter specifies whether to revoke authority to all subdirectories. If you do not specify this parameter, authority is revoked only to the object specified with the -object parameter, or the instance root directory if the -object parameter is not specified. This parameter applies to all objects specified with -object parameters.</p></li>
|
||
|
|
|
||
|
|
<li><p><strong>-verbose</strong>
|
||
|
|
<br>This optional parameter turns on verbose messages, which can be helpful if you need to debug the script.</p></li>
|
||
|
|
|
||
|
|
<li><p><strong>-help</strong>
|
||
|
|
<br>This optional parameter displays the help message. If you specify this parameter, the script ignores all other parameters.</p></li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<p><strong>Examples</strong></p>
|
||
|
|
|
||
|
|
<p>In this example, the user profile jsmith no longer has authority to the instance devinst.</p>
|
||
|
|
<pre>rvkwasaut -instance devinst -user jsmith -recursive</pre>
|
||
|
|
|
||
|
|
<p>In this example, the user profile jsmith no longer has authority to the installedApps subdirectory and all nested objects in the installedApps subdirectory.</p>
|
||
|
|
<pre>rvkwasaut -instance devinst -object installedApps -user jsmith -recursive</pre>
|
||
|
|
|
||
|
|
</body>
|
||
|
|
</html>
|