Users logged into the sys group on the master domain manager
user masterop cpu=$master + group=sys
###########################################################
# APPLIES TO USERS LOGGED INTO THE SYS GROUP ON THE
# MASTER DOMAIN MANAGER.
user masterop cpu=$master + group=sys
begin
# OBJECT ATTRIBUTES ACCESS CAPABILITIES
# ---------- ------------ ----------------------
job cpu=@
+ logon="TWS_domain\TWS_user" access=@
job cpu=@
+ logon=root access=adddep,altpri,cancel,
confirm,deldep,release,
reply,rerun,submit,use
job cpu=@
+ logon=@
~ logon=root access=add,adddep,altpri,
cancel,confirm,
deldep,release,reply,
rerun,submit,use
schedule cpu=$thiscpu access=@
schedule cpu=@ access=adddep,altpri,cancel,
deldep,limit,release,
submit
resource access=add,display,
resource,use
file name=globalopts access=display
file name=prodsked access=display
file name=symphony access=display
file name=trialsked access=build, display
calendar access=display,use
cpu cpu=@ access=@
parameter name=@ ~ name=r@ access=@
report name=RUNHIST,RUNSTATS access=display
wkldappl name=@ access=add,delete,display,modify,list,unlock
lob name=@ access=use
endThis user definition applies to users logged into the sys group
on the master domain manager.
They are given a unique set of access capabilities. Multiple object
statements are used to give these users specific types of access to
different sets of objects. For example, there are three job statements:
- The first job statement permits unrestricted access to jobs that run on any workstation (@) under the user's name (TWS_domain\TWS_user).
- The second job statement permits specific types of access to jobs that run on any workstation and that run as root.
- The third job statement permits specific types of access to jobs that run on any workstation. Jobs that run as root are excluded.