QUERY COMMANDS

Notes:

¹ The default is to show all commands you are authorized to use.

Authorization

Privilege Class: Any

Purpose

Use QUERY COMMANDS to display the commands and diagnose codes you are authorized to use.

Operands

command: the names of commands to be checked for authorization.

Usage Notes

The same function is available through the COMMANDS command.
Some commands have more than one version, but the user may not be authorized to use all versions of the command. If the system rejects a command, it is probably because the user is not authorized to enter the command with the operand or operands entered.
To see the command versions you are authorized to use, enter QUERY COMMANDS cmd, where cmd is the name of the command or commands that interests you. You are shown the default IBM® privilege classes of the command that you are authorized to enter.
You may specify any number of commands. If a command name is entered twice, it appears twice in the response. No duplicate-entry checking is done.
Diagnose codes cannot be queried separately from commands.
IBMCLASS=ANY will output if:
- the command is allowed before logon and not disabled, or
- the user privilege class is ANY, meaning the command version is not associated with any particular privilege class and the command is enabled.

Responses

Response 1:

cmd1    cmd2    cmd3    cmd4    cmd5    cmd6
cmd7   …
⋮
diag1   diag2   diag3   diag4   diag5   diag6
diag7   …

is the response when the command QUERY COMMANDS is entered alone; all authorized commands and diagnose codes are displayed.

cmd1,2…: the names of authorized commands.
diag1,2…: the names of authorized diagnose codes.

Response 2:

AUTHORIZED {QUERY|SET} OPERANDS:                                
operand1  IBMCLASS={c1,c2,c3}     operand2  IBMCLASS={c1,c2,c3}  
                   {ANY     }                        {ANY     }  
                   {NONE    }                        {NONE    }  
operand3  IBMCLASS={c1,c2,c3}     operand4  IBMCLASS={c1,c2,c3}  
                   {ANY     }                        {ANY     } 
                   {NONE    }                        {NONE    }
⋮

is the response when the command COMMANDS is entered with the QUERY or SET operand; all authorized operands of the QUERY or SET command are displayed.

operand1,2 …: the names of authorized QUERY or SET operands.
c1,c2, …: the IBM-defined privilege classes of the operands that you are authorized to enter.

Response 3:

cmd1     IBMCLASS=c1,c2,c3
cmd2     IBMCLASS=ANY
cmd3     IBMCLASS=NONE

is the response you receive when you specifically enter commands to check authorization for them. The response includes one line of output for each command listed.

cmdx: is the name of the command you entered on the command line.
IBMCLASS=c1,c2,c3: the IBM-defined privilege classes of the command specified; the privilege class displayed reflects the authorization of the user making the inquiry.
IBMCLASS=ANY: indicates that the command is a class ANY command, and all users may enter the command.
IBMCLASS=NONE: indicates that you are not authorized to enter any version of the command.

Messages

HCP003E Invalid option - {option|command contains extra option(s) starting with option}