z/VM: CP Commands and Utilities Reference - z/VM - IBM

Usage Notes
Responses
* is the target user ID. You must have class C privileges to change another user
ID’s privilege classes. An asterisk (*) tells CP to use the issuer’s user ID.
LOCK
prevents any SET PRIVCLASS commands from being issued against the target
until an UNLOCK is issued, if either the issuer has class C privileges or the
target user ID is the issuer’s.
RESET
returns the target user ID’s privilege classes to those currently specified in the
CP directory if the PRIVCLASS is not locked against SET PRIVCLASS
processing and either the issuer has class C privileges or the target user ID is
the issuer’s.
UNLOCK
allows SET PRIVCLASS commands to be issued against the target if either the:
v Issuer is not the same as the target and has class C privileges
v Target user ID is the issuer’s. If the target user ID is the issuer’s ID, the
issuer must confirm his intentions by responding with '1' for this command to
complete successfuly.
A SET PRIVCLASS * UNLOCK command issued by a disconnected virtual
machine is rejected because there is no terminal to enter a response.
=classes
sets the specified privilege class or classes for the target user ID, if the user ID
is not locked against SET PRIVCLASS processing and either the issuer has
class C privileges or the target user ID is the issuer’s and the issuer is
authorized in the directory for the requested classes.
+classes
adds the specified privilege class or classes for the target user ID, if the user ID
is not locked against SET PRIVCLASS processing and either the issuer has
class C privileges or the target user ID is the issuer’s, and the issuer is
authorized in the directory for the requested classes.
-classes
removes the specified privilege class or classes from the target user ID, if the
user ID is not locked against SET PRIVCLASS processing and either the issuer
has class C privileges or the target user ID is the issuer’s.
* indicates all classes, A-6.
0 indicates no classes.
1. Use the SET PRIVCLASS command to change your privilege classes to a
subset of those defined in your directory entry. Users with class C privilege can
exceed the privilege classes in the system directory. For example, users with
class C privilege may enter a SET PRIVCLASS command to change another
user ID’s privilege classes.
Response 1:
If you specify the LOCK option and the command completes successfully, you see
something like this:
DAVID’s privilege classes have been locked.
SET PRIVCLASS
Chapter 2. CP Commands 1323