Version 8.2.2 for Mainframes
 —  Parameter Reference  —

USER - Restrict Use of Profile Parameter Strings and Modules

This profile parameter can be used to restrict the use of dynamic parameter strings as specified in a SYSPARM profile, NTSYS macro or parameter dataset (CMPRMIN), or to restrict an alternative parameter module (NATPARM). It corresponds to the macro NTUSER in the parameter module NATPARM.

Possible settings See USER Parameter Syntax.
Default setting none  
Dynamic specification yes This parameter can only be specified dynamically.

To restrict the use of an alternative parameter module (NATPARM), the corresponding macro NTUSER is used instead.

Specification within session no  

Notes:

  1. The USER parameter applies only to the string of dynamic parameters specified after it.
  2. When the dynamic profile parameters are evaluated and the USER parameter is encountered, Natural checks if the current user ID (that is, the current value of the system variable *INIT-USER) is contained in the list of user IDs specified with the USER parameter. If it is not, the user receives a corresponding error message, and the processing of dynamic profile parameters is terminated immediately.

The following topics are covered below:


USER Parameter Syntax

The parameter syntax of USER is as follows:

USER=(user-id,user-id,...),profile-parameter-string

Where:

Syntax Element Explanation
user-id The IDs of the users who will be allowed to use the subsequently specified string of profile parameters.
profile-parameter-string String of profile parameters.

Start of instruction setTo restrict the use of a SYSPARM profile

Start of instruction setTo restrict the use of a parameter string defined in an NTSYS macro or in a CMPRMIN dataset

Top of page

NTUSER Macro Syntax

The NTUSER macro in a Natural parameter module is specified as follows:

         NTUSER	user-id,user-id,user-id,...,profile-parameter-string
         NTUSER	user-id,user-id,...,profile-parameter-string

Notes:

  1. For an explanation of the syntax elements, see USER Parameter Syntax.
  2. The NTUSER macro applies to the parameter module in which it is specified. The default Natural parameter module linked to the environment-dependent Natural nucleus cannot be restricted.

Start of instruction setTo restrict the use of an alternative parameter module

Note:
When an alternative parameter module is to be used, Natural loads the alternative parameter module specified by the PARM parameter and checks if the current user ID (that is, the current value of the system variable *INIT-USER) is contained in the list of user IDs specified by the NTUSER macro in the alternative parameter module. If it is not, the user receives a corresponding error message, and the alternative parameter module is discarded.

Top of page

Example of USER Parameter

The following is an example of protecting a specific system file FNAT:

USER=(ADMIN1,ADMIN2),FNAT=(12,177,SECPASSW,74832055)

Top of page

Example of NTUSER Macro

The following is an example of protecting a Natural parameter macro:

         NTPRM ...
         ...
         NTUSER ADMIN1,ADMIN2

Top of page