USER - Restrict Use of Profile Parameter Strings and Modules

#### Search Results

Search

# USER - Restrict Use of Profile Parameter Strings and Modules

This profile parameter can be used to restrict the use of dynamic parameter strings as specified in a `SYSPARM` profile, `NTSYS` macro or parameter data set (`CMPRMIN`), or to restrict an alternative Natural parameter module. It corresponds to the macro `NTUSER` in the parameter module.

Possible settings | See USER Parameter Syntax.
Default setting | none |
Dynamic specification | yes | This parameter can only be specified dynamically. To restrict the use of an alternative Natural parameter module, the corresponding macro `NTUSER` is used instead.
Specification within session | no |

Notes:

1. The `USER` parameter applies only to the string of dynamic parameters specified after it.
2. When the dynamic profile parameters are evaluated and the `USER` parameter is encountered, Natural checks if the current user ID (that is, the current value of the system variable `*INIT-USER`) is contained in the list of user IDs specified with the `USER` parameter. If it is not, the user receives a corresponding error message, and the processing of dynamic profile parameters is terminated immediately.

The following topics are covered below:

- USER Parameter Syntax

- NTUSER Macro Syntax

- Example of USER Parameter

- Example of NTUSER Macro

## USER Parameter Syntax

The parameter syntax of `USER` is as follows:

USER=(user-id,user-id,...),profile-parameter-string

Where:

Syntax Element | Explanation
--- | ---
`user-id` | The IDs of the users who will be allowed to use the subsequently specified string of profile parameters.
`profile-parameter-string` | String of profile parameters.

To restrict the use of a SYSPARM profile

- Specify the `USER` parameter as the first parameter in the profile. The subsequent string of profile parameters in the profile, that is, the entire profile, can then only be used by the user specified with the `USER` parameter.

To restrict the use of a parameter string defined in an NTSYS macro or in a CMPRMIN data set

- Specify the `USER` parameter as the first parameter in the parameter string defined in an `NTSYS` macro or in a `CMPRMIN` data set.

## NTUSER Macro Syntax

The `NTUSER` macro in a Natural parameter module is specified as follows:

             NTUSER	user-id,user-id,user-id,...,profile-parameter-string
             NTUSER	user-id,user-id,...,profile-parameter-string

Notes:

1. For an explanation of the syntax elements, see USER Parameter Syntax.
2. The `NTUSER` macro applies to the Natural parameter module in which it is specified. The default Natural parameter module linked to the environment-dependent Natural nucleus cannot be restricted.

To restrict the use of an alternative Natural parameter module

- Specify the macro `NTUSER` in the alternative parameter module.

Note
When an alternative parameter module is to be used, Natural loads the alternative parameter module specified by the `PARM` parameter and checks if the current user ID (that is, the current value of the system variable `*INIT-USER`) is contained in the list of user IDs specified by the `NTUSER` macro in the alternative parameter module. If it is not, the user receives a corresponding error message, and the alternative parameter module is discarded.

## Example of USER Parameter

The following is an example of protecting a specific system file `FNAT`:

    USER=(ADMIN1,ADMIN2),FNAT=(12,177,SECPASSW,74832055)

## Example of NTUSER Macro

The following is an example of protecting a Natural parameter macro:

             NTPRM ...
             ...
             NTUSER ADMIN1,ADMIN2

### On this page

- USER Parameter Syntax
- NTUSER Macro Syntax
- Example of USER Parameter
- Example of NTUSER Macro