Settings for Each Sign-on User
To set each permission, the Management Console Security file (HULADM) is required.
In the Management Console Security file, define permission settings of one user per line. If you omit the definition of a user, the permissions in Default User are granted. If the Management Console Security file does not exist, or if the permissions in Default User are not defined, the permissions in Default Value of Each Field are granted.
File Name and Attributes
The name of the Management Console Security file is 'HULADM.' This name cannot be changed. You can find the Management Console Security file in the library in which HULFT is installed.
Use a physical source file of the fixed length for the file attribute of the file.
Description Format
When '#' is present at the beginning of a line, it is considered as a comment line. The file can accept a blank line.
Set one or more spaces between the fields.
Record Layout
You can edit the Management Console Security file (HULADM) with SEU. Describe the file according to the format shown in the table below:
Field Name |
Field Length |
Value |
---|---|---|
Sign-on user name |
Max. 10 |
10 alphanumeric characters |
Log Read Permission |
1 |
0 or 1 |
Log Delete Permission |
1 |
0 or 1 |
Permission to Access System Management Information |
1 |
0 or 1 |
Issue Request Permission |
1 |
0 or 1 |
Permission to View System Management Information |
1 |
0 or 1 |
Permission to View and Update System Management Information |
1 |
0 or 1 |
Permission to View and Delete System Management Information |
1 |
0 or 1 |
If you set a value other than '0' or '1' for a permission parameter (namely, fields except for user name), the default value becomes valid. Refer to Default Value of Each Field for the default values of each field.
Explanation of Each Field
The explanation of each field is given below. Refer to Default Value of Each Field for the default values of each field.
- Sign-on user name
-
The sign-on user name that sets the security is described.
- Log Read Permission
-
The Log Read Permission on Management Console is specified. It is a permission to view '1.Send Log Inquiry'2.Receive Log Inquiry', '3.Request Status Confirmation', '4.Transfer Status List', '5.Resend Queue Status List' of HULFT Main Menu on the Management Console.
- 0 :
-
Log Read Permission is not granted
- 1 :
-
Log Read Permission is granted
NoteIf Log Read Permission is set to "0", the following operations cannot be performed even when Log Delete Permission and Request Issue Permission are set to "1".
-
Issuing a request
-
Canceling a transfer
-
Deleting transfer log records
-
Deleting records from the Resend Queue
- Log Delete Permission
-
The Log Delete Permission on Management Console is specified. It is a permission to delete 'Send Log List By File', 'Send Log List By Host', 'Receive Log List By File', 'Receive Log List By Host' and 'Request Status Confirmation' on Management Console.
- 0 :
-
Log Delete Permission is not granted
- 1 :
-
Log Delete Permission is granted
Note-
If Log Read Permission is set to "0", log records cannot be deleted on each log screen even when Log Delete Permission is set to "1".
-
To delete (cancel) records from the transfer log on the Transfer Status List screen, Request Issue Permission is necessary rather than Log Delete Permission.
- Permission to Access System Management Information
-
This field specifies whether to enable following permissions, namely, Permission to View System Management Information (INFOREF), Permission to View and Update System Management Information (INFOUPD), and Permission to View and Delete System Management Information (INFODEL), or not. If you specify '0' for this field, following Permission to View System Management Information (INFOREF), Permission to View and Update System Management Information (INFOUPD), and Permission to View and Delete System Management Information (INFODEL) are all treated as 'not granted' regardless of an individual setting of each permission.
- 0 :
-
Permission to Access System Management Information is not granted.
- 1 :
-
Permission to Access System Management Information is granted.
- Issue Request Permission
-
The permission to issue and cancel Send File, Send Request, Resend File, and to delete Resend Queue on the screen is specified. It covers the permission to issue Send File on Send File List and Send Management Information List, permission to issue Send Request on Receive File List and Receive Management Information List, and permission to issue Send Cancellation on Transfer Status List, and permission to issue Resend File and to delete Request Queue on the Resend Queue Status List.
- 0 :
-
Issue permission of Send File, Send Request, and the like is not granted
- 1 :
-
Issue permission of Send File, Send Request, and the like is granted
NoteIf Log Read Permission is set to "0", the following operations cannot be performed on each log screen even when Request Issue Permission is set to "1".
-
Issuing a request
-
Canceling a transfer
-
Deleting records from the Resend Queue
- Permission to View System Management Information
-
This field specifies the permission to view management information on Management Console. It is a permission to view '6 System Configuration' on HULFT Main Menu. If you specify '0' for Permission to Access System Management Information (INFOREG), it is treated as 'not granted,' regardless of the specification of this field.
- 0 :
-
Permission to View System Management Information is not granted
- 1 :
-
Permission to View System Management Information is granted
= Remarks =When either of the following permissions is set to "1", you can view the system configurations (management information and System Environment Settings). Therefore, if you do not want the user to view the system configurations, all the permissions must be set to "0".
-
Permission to View System Management Information
-
Permission to View and Update System Management Information
-
Permission to View and Delete System Management Information
- Permission to View and Update System Management Information
-
This field specifies the permission to view and update management information on Management Console. It is a permission to view and update '6 System Configuration' on HULFT Main Menu. If you specify '0' for Permission to Access System Management Information (INFOREG), it is treated as 'not granted,' regardless of the specification of this field.
- 0 :
-
Permission to View and Update System Management Information is not granted
- 1 :
-
Permission to View and Update System Management Information is granted
- Permission to View and Delete System Management Information
-
This field specifies the permission to view and delete management information on Management Console. It is a permission to view and delete '6 System Configuration' on HULFT Main Menu. If you specify '0' for Permission to Access System Management Information (INFOREG), it is treated as 'not granted,' regardless of the specification of this field.
- 0 :
-
Permission to View and Delete System Management Information is not granted
- 1 :
-
Permission to View and Delete System Management Information is granted
Default User
When multiple user names with the same permissions exist, you can set default permissions by defining 'DEFAULTUSR' as a user name. When a user name is not found in the defined list of users to be checked, HULFT grants the permissions of 'DEFAULTUSR' to the user.
When both the user name and the permission settings of 'DEFAULTUSR' do not exist, the user is not allowed to use the Management Console.
Default Value of Each Field
Default value of each field is given below. When the corresponding user name does not exist or when the file name does not exist, the following default values are applied. When the value of the DEFAULTUSR does not exist, following default values are used:
Field Name |
Default Value |
---|---|
Log Read Permission |
0 |
Log Delete Permission |
0 |
Permission to Access System Management Information |
0 |
Issue Request Permission |
0 |
Permission to View System Management Information |
The value for Permission to Access System Management Information |
Permission to View and Update System Management Information |
|
Permission to View and Delete System Management Information |
Example of settings
# USER USER NAME # LOGREF LOG INQUIRE # LOGDEL DELETE LOG # INFOREG ACCESS MANAGEMENT INFORMATION # SENDREQ SEND START UP AND SEND REQUEST # INFOREF REFERENCE MANAGEMENT INFORMATION # INFOUPD UPDATE MANAGEMENT INFORMATION # INFODEL DELETE MANAGEMENT INFORMATION # # Sign-on user name # | Log Read Permission # | | Log Delete Permission # | | | Permission to Access System Configuration(*1) # | | | | Request Issue Permission # | | | | | Permission to View System Configuration(*1) # | | | | | | Permission to View and Update System Configuration(*1) # | | | | | | | Permission to View and Delete System Configuration(*1) # | | | | | | | | # | | | | | | | | # | | | | | | | | #USER LOGREF LOGDEL INFOREG SENDREQ INFOREF INFOUPD INFODEL DEFAULTUSR 1 0 0 0 0 0 0 QSECOFR 1 1 1 1 1 1 1 USR1 1 1 1 0 1 1 1
*1 |
: |
Permission to View System Configuration, Permission to View and Update System Configuration, and Permission to View and Delete System Configuration will become available only when Permission to Access System Configuration is set to "1". |