[Info-vax] Need help in REVOKE

[Jan-Erik Soderholm]

adityagtm4 at gmail.com wrote 2013-02-12 15:25:
> On Tuesday, 12 February 2013 18:46:40 UTC+5:30, Bart Zorn  wrote:
>> On 12-Feb-2013 11:23, adityagtm4 at gmail.com wrote:
>>
>>> Hi
>>
>>>
>>
>>> Suppose there are 20 Identifier are there for user...we can revoke
>>> it like:
>>
>>>
>>
>>> MCR AUTHORIZE REVOKE/ID identifier user
>>
>>>
>>
>>> but how can I revoke all the identifier in a single command. I have
>>> tried like this also, but no luck:
>>
>>>
>>
>>> MCR AUTHORIZE REVOKE/ID * user
>>
>>>
>>
>>> any help will be appreciated.
>>
>>>
>>
>>>
>>
>>> Thanks..!
>>
>>>
>>
>>
>>
>> Actually, identifiers are not granted to users, but to other
>> identifiers.
>>
>>
>>
>> What you could do, is remove/id user, which will remove the
>> identifier
>>
>> associated with the user (but not the userid itself) and all the
>> grants
>>
>> to this identifier. Next you could add/id user/value=uic=[uic] to
>>
>> recreate the uic-identifier of the userid.
>>
>>
>>
>> HTH,
>>
>>
>>
>> Bart
>
> And I don't want to remove a user... I want to keep that user...but want
> to remove the all the identifiers by using single commands....
>
>
> Thanks..!
>

Write a short DCL that you can run as a "single command".

The DCL runs a UAF SHOW /IDE/USER=<user>, parses the output
and runs a UAF REVOKE /IDENT <ident> <user> for each row.

Jan-Erik.