[Info-vax] Need help in REVOKE

[Joseph Huber]

Doug Phillips wrote:

> On 2/12/2013 9:00 AM, Joseph Huber wrote:
>> adityagtm4 at gmail.com wrote:
>>
>>> Suppose there are 20 Identifier are there for user...we can revoke it
>>> like:
>>>
>>> MCR AUTHORIZE REVOKE/ID identifier user
>>>
>>> but how can I revoke all the identifier in a single command. I have
>>> tried like this also, but no luck:
>>>
>>> MCR AUTHORIZE REVOKE/ID * user
>>>
>>> any help will be appreciated.
>>>
>>
>> If this is not a one-time action, but has to be done often/for many
>> users, then I see only this possibility:
>>
>>   Do AUTHORIZE LIST user/identifiers
>>   Write a DCL procedure to read the resulting RIGHTSLIST.LIS file.
>>   Parse each line to get the identifier, then
>>   REVOKE the identifier from the user given.
>>
>>   (REMOVE/IDENT as proposed would be quite contra-productive !)
>>
> 
> Please explain.
> 
> Example:
> UAF> add/id TEST1
> %UAF-I-RDBADDMSG, identifier TEST1 value %X80010007 added to rights
> database UAF> add/id TEST2
> %UAF-I-RDBADDMSG, identifier TEST2 value %X80010008 added to rights
> database
> UAF> show /id default
>    Name                             Value           Attributes
>    DEFAULT                          [000200,000200]
> UAF>
> UAF> show/rights default
> UAF>
> UAF> grant/id test1 default
> %UAF-I-GRANTMSG, identifier TEST1 granted to DEFAULT
> UAF> grant/id test2 default
> %UAF-I-GRANTMSG, identifier TEST2 granted to DEFAULT
> UAF> show/rights default
> Identifier                         Value           Attributes
>    TEST1                            %X80010007
>    TEST2                            %X80010008
> UAF> remove/id default
> %UAF-I-RDBREMMSGU, identifier DEFAULT value [000200,000200] removed from
> rights database
> UAF> add/id default/value=uic=[200,200]
> %UAF-I-RDBADDMSGU, identifier DEFAULT value [000200,000200] added to
> rights database
> UAF> show/rights default
> UAF>
> 
> 
> So, what problem have I caused that I don't know about?

yes You (and Bart) are right.
I just stumbled over the word "user" in the command,
which in fact is the rights identifier associated with the user,
which in turn is -usually- the same as the userid.
 
-- 
 
 Joseph Huber   - http://www.huber-joseph.de