John, I had used the REVOKE AUTH * * dirid FROM userid as you suggested. This was also the command
I used before I originally posted my question. For funnies, I tried REVOKE AUTH dirid FROM userid
then issued the QUERY AUTH command and the user disappeared from the list. My assumption was
based on the way the doc is written, an ITSO CMS Shared File System Primer, it appears
that '*' (asterisk) are the default. Apparently they are not. The use of asterisks indicates
that only the files are made unavailable. Using no asterisks revokes your access to that
directory.
Ya learn somethin' new everyday.
Thanks for your help.
Steve
| John Hall <[EMAIL PROTECTED]>
Sent by: VM/ESA and z/VM Discussions <[email protected]> 01/25/2006 09:13 AM
|
To: [email protected] cc: Subject: Re: SFS REVOKE command |
On 1/25/06, Steve Gentry <[EMAIL PROTECTED]> wrote:
>
> I'm trying to revoke authority for a userid to an SFS directory. My userid
> is an SFS administrator. I originally Enrolled the user in this filepool.
> I issue the revoke command and it appears to work successfully. I then
> issue a Query Authority and the use I just revoked is still
> listed as having access to this specific directory. I issue the revoke
> command again and it says that I have already revoked
> authority for this user. Why is the user still showing up when I do the
> Query Authority command?
> Thanks,
> Steve
>
Steve,
Another possibility comes to mind, altho it generally only applies to
direct access to the files. (I doubt this applies, b/c you say that
QUERY AUTH still shows the authorization...but it's worth trying) A
FILECONTROL directory has authorizations for the directory and for the
files in the directory. They are completely unrelated. You have to
GRANT or REVOKE auths for both the directory and the files in the
directory.
Try:
REVOKE AUTH * * dirid FROM userid
Here's another possibility: Any chance you have a REVOKE EXEC sitting
around that's mucking up the picture? You might try the following, to
ensure that a REVOKE EXEC isn't messing things up:
SET IMPEX OFF
REVOKE AUTH ...
SET IMPEX ON
John
--
John Hall (+1) 727-397-6373 Safe Software, Inc.
JohnHall (at) SafeSoftware.Com http://www.SafeSoftware.Com
JohnBeachFL (at) gmail.com
