LISTAUTH Command

Use the LISTAUTH command to display all AUTHORIZ CONFIG records about a particular authority or a user ID.
vmx32besp
Use the LISTAUTH command to display all AUTHORIZ CONFIG records about a particular authority or a user ID.
LISTAUTH [
userid 
[
authword
 ...]]   [(
TYPE
 | FIFO | LIFO]
Definitions
  • userid
    Specifies the user ID whose authorizations are to be listed. You can specify a user ID by name if you are authorized to query that user ID, or any of the following variable user IDs:
Userid variable
Userids that LISTAUTH command finds
I
User ID under which you are entering the LISTAUTH command
ANYUSR
Any user, regardless of name (the first one the command finds)
SOMEUSR
Any user, regardless of name (the first one the command finds)
EVERYUSR
All users, regardless of name
The default user ID is I.
  • authword 
    ...
    Specifies a list of authorities to query. You can specify any authority, or any of the following authority variables:
Authority variable
Authorities that LISTAUTH command finds
ANYCMD
Any command or authority for the specified user ID or group
SOMECMD
Any command or authority for the specified user ID or group
EVERYCMD
All commands or authorities for the specified user ID or group
ANYWRD
Any command or authority for the specified user ID or group
SOMEWRD
Any command or authority for the specified user ID or group
EVERYWRD
All commands or authorities for the specified user ID or group
The default for each authority is EVERYWRD.
The default authorization word for the LISTAUTH command is EVERYWRD, while the default authorization word for the MAY command is ANYWRD. These different default values can produce different results for the LISTAUTH and MAY commands, even though their functions are similar.
  • [
    TYPE
    | FIFO | LIFO]
    Determines whether to display or stack the GRANT or WITHHOLD configuration file records, if any, that determine whether the use of the command, utility, or screen selection is permitted. TYPE displays the record. FIFO stacks the records in the response in first in, first out order. LIFO stacks the records in the response in last in, first out order.
Description
The LISTAUTH command lets you query the GRANT, LIST, and WITHHOLD records in the AUTHORIZ CONFIG file to determine whether a user ID has a specific authorization and responds by displaying the GRANT and WITHHOLD records that relate to the specified authorization.
The LISTAUTH command is very similar to the MAY command. Both respond to your queries by displaying the GRANT and WITHHOLD records that relate to the specified authorization, but the MAY command also responds by return code.
If you specify fewer authorities than are possible for a particular authorization, the LISTAUTH command treats your request as if you supplied a trailing EVERYWRD. For example, the following commands mean the same: "Can Helen issue all forms of the ADMIN command?":
vmsecure
listauth helen admin
or
vmsecure
listauth helen admin everywrd
VM:Secure
searches for authorizations that allow use of all forms of the ADMIN command, and responds with a message like the following:
ACCEPTED BY: GRANT ADMIN MANAGERS TO SUSAN HELEN JOHN
Examples
  • To determine the
    VM:Secure
    authorizations JUNIOR has, enter:
    vmsecure
    listauth junior
  • To display all authorizations that control the use of the CHANGE command, enter:
    vmsecure
    listauth anyusr change
  • To find out if you authorized anyone to change SMITH’s user ID:
    vmsecure
    listauth anyusr change smith
For information about how to find the final disposition of a user ID’s authorization for a command or function, see the MAY Command.