T.R | Title | User | Personal Name | Date | Lines |
---|
450.1 | | BSS::JILSON | WFH in the Chemung River Valley | Fri Apr 11 1997 10:13 | 10 |
| /UIC & /AUTHORIZE should not be allowed together but they are. If you use
these together and the image you run is LOGINOUT.EXE, the UIC of the
created process will be the UIC of the username executing the RUN. The
code first creates the process with the UIC in /UIC and then sees the
/AUTHORIZE and modifes the process with the quotas, uic & rights of the
username executing RUN. I suspect you need the impersonation services in
the latest version of VMS. Unfortunately there is no way to create a
process with a different username with the DCL RUN command.
Jilly
|
450.2 | 2 steps SUBMIT/USER then RUN/DETACHED/AUTHORIZE | GIDDAY::GILLINGS | a crucible of informative mistakes | Sun Apr 13 1997 21:29 | 8 |
| To create a detached process running under a different username, you need
2 steps. First formulate the RUN/DETACHED/AUTHORIZE command as if executed
by the target user and place it in a command procedure. Execute the
procedure as a batch job with SUBMIT/USER=target.
Privilege required is CMKRNL.
John Gillings, Sydney CSC
|
450.3 | | AUSS::GARSON | DECcharity Program Office | Sun Apr 13 1997 22:44 | 16 |
| re .0
> At the same time, customer would like to know that when he uses
> $run/detach/uic. What privileges does he need ?
$ RUN/DETACH by itself requires no privileges.
$ RUN/UIC requires DETACH privilege
DETACH privilege is an "all" category privilege.
$ RUN/UIC/DETACH is a redundant form of $ RUN/UIC reflecting historical
cruft.
See a recent topic regarding the use of /AUTHORIZE with /UIC, which does
not work as expected.
|