Modifying Exceptions to Command Rules
To modify exceptions to command rules, involving the users and protocols for which the exception is allowed, enter 1 in the Opt field for that command on the Work with Command Exceptions screen, as shown in Creating Exceptions to Command Filtering Rules (STRFW > 4 > 9).
To modify the command string itself, copy the exceptions from the old command to the new one, (as shown in Copying Exceptions to Command Rules) then delete the old one (as shown in Deleting Exceptions to Command Rules).
The Modify Command Exception screen appears:
Modify Command Exception Command . . . CALL EVGTST/TDSPPGM (SMZ8 GSEPNTR) Define user authority, press Enter. Y=Yes User*, %Group Remote FTP / Group profile Cmd REXEC DDM *PUBLIC EVGTST More... F3=Exit F4=Prompt F8=Print F12=Cancel |
The read-only Command field shows the command for which the exceptions are made.
For an entered command to match the exception, its initial characters, through the length of the string entered here, must match precisely, except that:
- Quotation marks (') and double quotes (") are ignored
- Multiple consecutive blanks are considered as a single blank
In entering the string,
- The command must not end with an asterisk ("*").
The remaining fields show the users and protocols for whom the exception is valid:
User*, %Group, Group profile
The name or generic name of a user or group for whom you are creating these settings. To see a list of possible users or groups, press the F4 key. The value %PUBLIC refers to all users for whom other exceptions have not been set for this command.
Remote Cmd
If set to Y, the user may run the command with these parameters via the Remote Command protocol.
FTP/REXEC
If set to Y, the user may run the command with these parameters via the FTP or REXEC protocols.
DDM
If set to Y, the user may run the command with these parameters via the DDM protocol.
Thus, for example, if
- the Command field is set to CALL THISPARM THATPARM
- The User*, %Group, Group profile is set to %PLONYGRP
- the DDM field is set to Y
members of the group %PLONYGRP may run commands beginning with CALL THISPARM THATPARM via the DDM protocol, even if the CALL command would normally be rejected.
To print the list of exceptions from this screen, press the F8 key.