VMS Help SET, RIGHTS_LIST  *Conan The Librarian (sorry for the slow response - running on an old VAX)

    Allows users to modify the process or system rights list. You
    must specify either the /DISABLE or the /ENABLE qualifier with
    the SET RIGHTS_LIST command.

    Format

      SET RIGHTS_LIST  id-name[,...]

1 - Parameter

 id-name[,...]

    Specifies identifiers to be added to or removed from the process
    or system rights list. The id-name parameter is a string of 1 to
    31 alphanumeric characters, underscores (_),  and dollar signs
    ($);  each name must contain at least one nonnumeric character.

2 - Qualifiers

 2.1 - /ATTRIBUTES

       /ATTRIBUTES=(keyword[,...])

    Specifies attributes to be associated with the identifiers.
    Attributes may be added to new or existing identifiers. The
    following are valid keywords:

    DYNAMIC      Allows unprivileged holders of the identifier to
                 remove and to restore the identifier from the
                 process rights list by using the DCL command SET
                 RIGHTS_LIST.

    NOACCESS     Makes any access rights of the identifier null and
                 void. If a user is granted an identifier with the No
                 Access attribute, that identifier has no effect on
                 the user's access rights to objects. This attribute
                 is a modifier for an identifier with the Resource or
                 Subsystem attribute.

    RESOURCE     Allows holders of an identifier to charge disk space
                 to the identifier. Used only for file objects.

    SUBSYSTEM    Allows holders of the identifier to create and
                 maintain protected subsystems by assigning the
                 Subsystem ACE to the application images in the
                 subsystem. Used only for file objects.

    To remove an attribute from the identifier, add a NO prefix
    to the attribute keyword. For example, to remove the Resource
    attribute, specifiy /ATTRIBUTE=NORESOURCE.

    The default uses the current processes in the rights database.
    Use the command SHOW PROCESS/RIGHTS to see the attributes of the
    current process.

 2.2 - /DISABLE

    Removes the identifiers from the process or system rights list.
    You cannot use the /DISABLE qualifier with the /ENABLE qualifier.
    Note that removing more than ten identifiers in a single command
    invocation requires CMKRNL privilege.

 2.3 - /ENABLE

    Adds the identifiers to the process or system rights list. You
    cannot use the /ENABLE qualifier with the /DISABLE qualifier.
    Note that adding more than ten identifiers in a single command
    invocation requires CMKRNL privilege.

 2.4 - /IDENTIFICATION

       /IDENTIFICATION=pid

    Specifies the process identification (PID) value of the process
    whose rights list is to be modified. The PID is assigned by the
    system when the process is created. When you specify a PID, you
    can omit the leading zeros.

    If you specify the /IDENTIFICATION qualifier, you cannot use the
    /PROCESS qualifier. By default, if neither the /IDENTIFICATION
    nor the /PROCESS qualifier is specified, the current process is
    assumed. You cannot use the /IDENTIFICATION qualifier with the
    /SYSTEM qualifier.

 2.5 - /PROCESS

       /PROCESS[=process-name]

    Specifies the name of the process whose rights list is to be
    modified. The process name can contain from 1 to 15 alphanumeric
    characters.

    If you specify the /PROCESS qualifier, you cannot use the
    /IDENTIFICATION qualifier. By default, if neither the /PROCESS
    nor the /IDENTIFICATION qualifier is specified, the current
    process is assumed.

    You cannot use the /PROCESS qualifier with the /SYSTEM qualifier.

 2.6 - /SYSTEM

    Specifies that the desired operation (addition or removal of
    an identifier) be performed on the system rights list. You
    cannot use the /SYSTEM qualifier with the /PROCESS or the
    /IDENTIFICATION qualifier.

3 - Examples

    1.$ SET RIGHTS_LIST/ENABLE/ATTRIBUTES=RESOURCE MARKETING

      The SET RIGHTS_LIST command in this example adds the MARKETING
      identifier to the process rights list of the current process.
      Specifying the RESOURCE attribute allows holders of the
      MARKETING identifier to charge resources to it.

    2.$ SET RIGHTS_LIST/ENABLE/SYSTEM PHYSICS101
      %SYSTEM-F-NOPRIV, insufficient privilege or object
       protection violation
      $ SET PROCESS/PRIVILEGES=(CMKRNL,SYSNAM)
      $ SET RIGHTS_LIST/ENABLE/SYSTEM PHYSICS101

      The SET RIGHTS_LIST command in this example adds the PHYSICS101
      identifier to the system rights list. You must have both the
      CMKRNL (change mode to kernel) and SYSNAM (system logical name)
      privileges to modify the system rights list.