Modifies an identifier name, its associated value, or its
attributes in the rights database.
Format
MODIFY/IDENTIFIER id-name
1 – Parameter
id-name
Specifies the name of an identifier to be modified.
2 – Qualifiers
2.1 /ATTRIBUTES
/ATTRIBUTES=(keyword[,...])
Specifies attributes to be associated with the modified
identifier. The following keywords are valid:
DYNAMIC Allows unprivileged holders of the identifier to
remove and to restore the identifier from the
process rights list by using the DCL command SET
RIGHTS_LIST.
HOLDER_ Prevents people from getting a list of users who
HIDDEN hold an identifier, unless they own the identifier
themselves.
NAME_HIDDEN Allows holders of an identifier to have it
translated, either from binary to ASCII or from
ASCII to binary, but prevents unauthorized users
from translating the identifier.
NOACCESS Makes any access rights of the identifier null
and void. If a user is granted an identifier with
the No Access attribute, that identifier has no
effect on the user's access rights to objects. This
attribute is a modifier for an identifier with the
Resource or Subsystem attribute.
RESOURCE Allows holders of an identifier to charge disk
space to the identifier. Used only for file
objects.
SUBSYSTEM Allows holders of the identifier to create and
maintain protected subsystems by assigning the
Subsystem ACE to the application images in the
subsystem. Used only for file objects.
To remove an attribute from the identifier, add a NO prefix
to the attribute keyword. For example, to remove the Resource
attribute, specify /ATTRIBUTES=NORESOURCE.
NOTE
If you specify the NORESOURCE keyword without naming any
holder with the /HOLDER qualifier, all holders lose the
right to charge resources.
2.2 /HOLDER
/HOLDER=username
Specifies the holder of an identifier whose attributes are to be
modified. The /HOLDER qualifier is used only in conjunction with
the /ATTRIBUTES qualifier.
If you specify /HOLDER, the /NAME and /VALUE qualifiers are
ignored.
2.3 /NAME
/NAME=new-id-name
Specifies a new identifier name to be associated with the
identifier.
2.4 /VALUE
/VALUE=value-specifier
Specifies a new identifier value. Note that an identifier value
cannot be modified from a UIC to a non-UIC format or vice versa.
The following formats are valid for the value-specifier:
IDENTIFIER:n An integer value in the range of 65,536 to
268,435,455. You can also specify the value
in hexadecimal (precede the value with %X) or
octal (precede the value with %O).
To differentiate general identifiers from UIC
identifiers, %X80000000 is added to the value
you specify.
GID:n GID is the POSIX group identifier. It is an
integer value in the range 0 to 16,777,215
(%XFFFFFF). The system will add %XA400.0000
to the value you specify and then enter this
new value into the system RIGHTSLIST as an
identifier.
UIC:uic A UIC value in the standard UIC format.
3 – Examples
1.UAF> MODIFY/IDENTIFIER OLD_ID /NAME=NEW_ID
%UAF-I-RDBMDFYMSG, identifier OLD_ID modified
The command in this example changes the name of the OLD_ID
identifier to NEW_ID.
2.UAF> MODIFY/IDENTIFIER/VALUE=UIC:[300,21] ACCOUNTING
%UAF-I-RDBMDFYMSG, identifier ACCOUNTING modified
The command in this example changes the old UIC value of the
identifier ACCOUNTING to a new value.
3.UAF> MODIFY/IDENTIFIER/ATTRIBUTES=NORESOURCE-
_UAF> /HOLDER=CRAMER ACCOUNTING
%UAF-I-RDBMDFYMSG, identifier ACCOUNTING modified
The command in this example associates the attribute NORESOURCE
with the identifier ACCOUNTING in CRAMER's holder record. The
identifier ACCOUNTING is not changed.