Change Function Usage (CHGFCNUSG)

Where allowed to run: All environments (*ALL)
Threadsafe: Yes 		Parameters
Examples
Error messages

The Change Function Usage (CHGFCNUSG) command changes the allowed usage information of a registered function. Functions can be registered by using the Register Function (QSYRGFN) API.

Some functions provide other means to authorize users to the function. For example, a user that is not allowed to use the Service Trace (QIBM_SERVICE_TRACE) function will still be allowed to use the Trace Internal (TRCINT) command if they have service (*SERVICE) special authority.

Restrictions: You must have security administrator (*SECADM) special authority to use this command.

Top

Parameters

Keyword Description Choices Notes
FCNID Function ID Simple name Required, Positional 1
USER User Simple name Optional
USAGE Usage *ALLOWED, *DENIED, *NONE Optional
DEFAULT Default authority *SAME, *ALLOWED, *DENIED Optional
ALLOBJAUT *ALLOBJ special authority *SAME, *USED, *NOTUSED Optional
Top

Function ID (FCNID)

Specifies the function identifier for which the usage information is to be changed.

This is a required parameter.

name
Specify the name of the function ID for which the usage information is to be changed.
Top

User (USER)

Specifies the name of the user profile whose function usage information is to be changed.

name
Specify the name of the user profile whose function usage information is to be changed.
Top

Usage (USAGE)

Specifies the allowed usage of the user profile specified for the User (USER) parameter.

*ALLOWED
The user profile is allowed to use the function.
*DENIED
The user profile is not allowed to use the function unless the function provides some other way to authorize users.
*NONE
The user profile will not be explicitly allowed or denied usage of the function.
Top

Default authority (DEFAULT)

Specifies the default usage for the function. The default usage is used if the user or one of its groups does not have a specific usage setting.

*SAME
The value does not change.
*ALLOWED
User profiles without a usage setting for the function are allowed to use the function.
*DENIED
User profiles without a usage setting for the function are not allowed to use the function unless the function provides some other way to authorize users.
Top

*ALLOBJ special authority (ALLOBJAUT)

Specifies whether all object (*ALLOBJ) special authority may be used to give a user access to the function.

*SAME
The value does not change.
*USED
A user with *ALLOBJ special authority is always allowed to use the function.
*NOTUSED
For a user with *ALLOBJ special authority to use the function, the usage information specified for the function must indicate that the user is allowed to use the function for one of the following reasons:
  • the user is allowed usage,
  • one of its groups is allowed usage, or
  • the default setting is to allow usage.
Top

Examples 

CHGFCNUSG   FCNID(QIBM_SERVICE_TRACE)  DEFAULT(*DENIED)
            USER(QSRVBAS)  USAGE(*ALLOWED)

This command denies access to the QIBM_SERVICE_TRACE function for the default user. It also allows the QSRVBAS user profile to use the function.

Top

Error messages

*ESCAPE Messages

CPF2204
User profile &1 not found.
CPF2225
Not able to allocate internal system object.
CPF222E
&1 special authority is required.
CPF228A
Function &1 not registered.
CPF229B
Operation not allowed for function &1.
CPF229D
Operation not allowed on user profile &1.
CPF3CD9
Requested function cannot be performed at this time.
CPF3CDA
Registration facility repository not available for use.
Top