HP Integrity NonStop J-Series - Manual (Page 85)

Web ViewPoint User Guide Version 5.14 - 528226-014 85
(mon) [READ] {STATUS} CUI SCF PAGESIZE -1;STATUS MON <$proc>, DETAIL
(mon) [WRITE] {START} CUI SCF PAGESIZE -1;START MON <$proc>
(mon) [WRITE] {STOP} CUI SCF PAGESIZE -1;STOP MON <$proc>
(mon) [READ] {EVENTS} NEX SUBSYS MON
(mon) [READ] {HELP} CUI SCF PAGESIZE -1;HELP STORAGE MON
SCRIPT FILE SYNTAX AND EXPLANATION:
In this above script, there are two things to be noted.
A. Observe lines which read, “(storage) (root)”, “(adapter) (storage)”, “(disk) (storage)” and “(mon) (storage)”.
These lines are examples of Object Declarations. This is how you specify the hierarchy in objects.
B. All other lines in the script above are examples of Command Declarations. This is where you specify what
operations are allowed on objects and other security options.
Detailed explanation of Object and Command Declaration is as mentioned below:
A. An Object Declaration is of the type:
(object-name) (parent-name)
where:
(object-name) indicates the name of the new object that has to be added.
(parent-name) indicates the object under which the new Object is to be added.
In the above example, the line (storage) (root) is an example of an Object declaration and which means: Add the
object “storage” under the object “root”. Similarly, the line (mon) (storage) is an example of an Object declaration
which means: Add the object “mon” under the object “storage”. Note, that to add the object “mon” under
“storage”, the object “storage” must have previously been already added to “root” or some other valid parent.
Object Manager provides four Objects by default, and they are “root”, “logon”, “tacl” and “users”. The objects
“logon”, “tacl” and “users” are used to manage user level security (e.g. who all should be allowed to log on to
Object Manager, who should be allowed to execute a Command etc.), and the object “root” is used as a base for
adding new Objects.
B. A Command Declaration is of the type:
(object-name) [Command-type] {Command Name} command-id command-syntax
where:
(object-name) is the object under which the command has to be added.
[Command-type] indicates whether the command is insensitive (can be executed by any user), or sensitive
(can be executed only by the creator/ list of users present in the “tacl” object)
{Command Name} is the name of the Command (usually the caption of a button, seen in the Object Manager
command window)
command-idis one of BIP,CUI,NEXorNCU; indicating the type of command.
command-syntax contains the actual syntax for the command.
The following is a detailed explanation of the Command Declaration:
[Command-type]
Indicates whether the command is insensitive (can be executed by any user), or sensitive (can be executed only by
the creator/ list of users present in the “tacl” object)
 If the command type is [READ], it means that the command is non-sensitive and can be executed by any user
who has logged on to Object Manager.
 If the command type is [WRITE], it means that the command is sensitive and can be executed only by the
creator of OCM. (Note that even though the creator of OCM has the right to execute sensitive commands, it is
up to the command interpreter to decide whether to actually proceed with the command execution)