/INPUT_ONLY can be used with SPY to skip watching terminal output and instead watch only the user's input keystrokes. The /DISPLAY_TYPE qualifier allows you to chose the format in which control characters are displayed during input-only watching or logging. Your site must be licensed to use input-only and any watcher and the user being watched must have been authorized by the system manager for input-only watching since passwords and other non-echoed input are displayed during input watching. Rights-list Identifiers are used to specify who may watch, or be watched, with /INPUT_ONLY. The Rights-list Identifiers used are SPY$INPUT_WATCHER and SPY$INPUT_WATCHEE. Any user using the input-watching feature to watch another with SPY must have been granted the Rights-list Identifier SPY$INPUT_WATCHER. Any user who is going to be watched /INPUT_ONLY with SPY must have been granted the Rights-list Identifier SPY$INPUT_WATCHEE. For help on /INPUT_ONLY watching, see the top-level PEEK Subtopic: Watching /INPUT_ONLY. INPUT_ONLY terminal-logging is done using NDC's KeyCapture product.
1 – License-Option
You must get a special license key from NDC in order to do input watching or logging. A PEEK/SHOW LICENSE command will display whether your site has enabled the input-only watching/logging feature in PEEK or SPY. If your site is licensed for INPUT_ONLY, then to use this feature both any watcher and the user/logger must have been granted the proper rights-ids. For more information, see the PEEK INPUT_ONLY_watching_and_logging Subtopic: Rights-IDs. GREAT CARE SHOULD BE USED WHEN LICENSING THE INPUT-ONLY FEATURE SINCE IT ALLOWS THE WATCHING OR LOGGING OF PASSWORDS AND OTHER NON-ECHOED INPUT.
2 – Rights-IDs
If your site is licensed to use the Input-Only feature then input-only watching/logging can be authorized for specific users by granting them the proper rights-ids. For being watched by SPY with /INPUT_ONLY the ID is SPY$INPUT_WATCHEE. For watching with SPY using /INPUT_ONLY the ID is SPY$INPUT_WATCHER. To add these identifiers to the system rights database use the AUTHORIZE commands ADD/IDENTIFIER SPY$INPUT_WATCHER, and ADD/IDENTIFIER SPY$INPUT_WATCHEE. To then grant these identifiers to specific users, use an AUTHORIZE command in the form of GRANT /IDENTIFIER PEEK$INPUT_WATCHER J_JONES GREAT CARE SHOULD BE USED WHEN GRANTING THESE IDENTIFIERS SINCE THEY ALLOW THE WATCHING OF PASSWORDS AND OTHER NON-ECHOED INPUT.