I would never recommend giving a tape operator class A.. besides FORCE -- they can SHUTDOWN the system .. also XAUTOLOG users. I can't think of any class A commands offhand that I would want a tape operator to have access to.
The 'right' way to restrict things is to determine which privileged commands the tape operator needs to issue, and create a command class that gives access to only those commands. (class T for example) I would think it would be a fairly short list.. ATTACH/DETACH and some QUERY commands - and maybe not even those depending on what you use for tape operations. But at a minimum - I would take away class A right now. Scott Rohling On Wed, Apr 14, 2010 at 6:04 AM, Horlick, Michael <michael.horl...@cgi.com>wrote: > Greetings, > > > > Yesterday afternoon we had one of our tape operators accidently FORCE off a > VSE machine. We noticed he had Class A in his directory. > > > > If we remove class A what CP commands will he now be unable to perform? Is > there a list of CP Class A commands somewhere? > > > > Thanks, > > > > Mike Horlick > > Conseiller > > CGI Gestion Intégrée des Technologies > > 1350 Boul. René-Lévesque Ouest > > Montréal, Qc, H3G 1T4 > > >
