Adjusting Your Process Privileges

If your system manager has granted you elevated privileges, you should take care to use them responsibly. Your system manager can grant privileges in such a way as to be enabled by default (default privileges) or so that you must specifically enable them (authorized privileges).

Possessing elevated privileges implies that you can, by misuse of the privilege, interfere with the operation of the system. To avoid any accidental damage, it is recommended that you enable privileges only when needed, if practical.

Privileges are enabled and disabled with the following command:

    $ SET PROCESS/PRIVILEGE=([NO]privilege_name,...) 

Let's say that your system manager has granted you the GRPPRV privilege. This privilege allows you to access files belonging to other members of your UIC group through the SYSTEM category and to affect their processes. When the need arose to perform that type of file access, you could enable and disable the privilege in this way:

    $ SET PROCESS/PRIVILEGE=GRPPRV      (perform the necessary work)    $ SET PROCESS/PRIVILEGE=NOGRPPRV 

Under normal circumstances, most users need only the TMPMBX and NETMBX privileges. To return to that state no matter what privileges are currently enabled, you may use the following command:

    $ SET PROCESS/PRIVILEGE=(NOALL,TMPMBX,NETMBX) 

NOALL first disables all privileges; then, TMPMBX and NETMBX are enabled. If your system manager has granted you default privileges that you do not always need, consider placing a command such as the one above in your LOGIN.COM file, enabling only the privileges you need at all times.