USER - Restrict Use of Profile Parameter Strings and Modules

This profile parameter can be used to restrict the use of dynamic parameter strings as specified in a SYSPARM profile, NTSYS macro or parameter data set (CMPRMIN), or to restrict an alternative Natural parameter module. It corresponds to the macro NTUSER in the parameter module.

Possible settings See USER Parameter Syntax.
Default setting none  
Dynamic specification yes This parameter can only be specified dynamically.

To restrict the use of an alternative Natural parameter module, the corresponding macro NTUSER is used instead.

Specification within session no  

Notes:

  1. The USER parameter applies only to the string of dynamic parameters specified after it.
  2. When the dynamic profile parameters are evaluated and the USER parameter is encountered, Natural checks if the current user ID (that is, the current value of the system variable *INIT-USER) is contained in the list of user IDs specified with the USER parameter. If it is not, the user receives a corresponding error message, and the processing of dynamic profile parameters is terminated immediately.

The following topics are covered below:

USER Parameter Syntax

The parameter syntax of USER is as follows:

USER=(user-id,user-id,...),profile-parameter-string

Where:

Syntax Element Explanation
user-id The IDs of the users who will be allowed to use the subsequently specified string of profile parameters.
profile-parameter-string String of profile parameters.

Start of instruction setTo restrict the use of a SYSPARM profile

  • Specify the USER parameter as the first parameter in the profile. The subsequent string of profile parameters in the profile, that is, the entire profile, can then only be used by the user specified with the USER parameter.

Start of instruction setTo restrict the use of a parameter string defined in an NTSYS macro or in a CMPRMIN data set

  • Specify the USER parameter as the first parameter in the parameter string defined in an NTSYS macro or in a CMPRMIN data set.

NTUSER Macro Syntax

The NTUSER macro in a Natural parameter module is specified as follows: 

         NTUSER	user-id,user-id,user-id,...,profile-parameter-string
         NTUSER	user-id,user-id,...,profile-parameter-string

Notes:

  1. For an explanation of the syntax elements, see USER Parameter Syntax.
  2. The NTUSER macro applies to the Natural parameter module in which it is specified. The default Natural parameter module linked to the environment-dependent Natural nucleus cannot be restricted.

Start of instruction setTo restrict the use of an alternative Natural parameter module

  • Specify the macro NTUSER in the alternative parameter module.

Note:
When an alternative parameter module is to be used, Natural loads the alternative parameter module specified by the PARM parameter and checks if the current user ID (that is, the current value of the system variable *INIT-USER) is contained in the list of user IDs specified by the NTUSER macro in the alternative parameter module. If it is not, the user receives a corresponding error message, and the alternative parameter module is discarded.

Example of USER Parameter

The following is an example of protecting a specific system file FNAT: 

USER=(ADMIN1,ADMIN2),FNAT=(12,177,SECPASSW,74832055)

Example of NTUSER Macro

The following is an example of protecting a Natural parameter macro:

         NTPRM ...
         ...
         NTUSER ADMIN1,ADMIN2