From:	CRDGW2::CRDGW2::MRGATE::"SMTP::CRVAX.SRI.COM::RELAY-INFO-VAX"  2-AUG-1990 08:44:45.35
To:	MRGATE::"ARISIA::EVERHART"
CC:	
Subj:	RE: Modifying the SUBMIT Verb

Received:  by crdgw1.ge.com (5.57/GE 1.70)
	 id AA14556; Tue, 31 Jul 90 23:38:21 EDT
Message-Id:  <9008010338.AA14556@crdgw1.ge.com>
Received: From scfd.nwc.navy.mil ([26.3.0.85]) by CRVAX.SRI.COM with TCP; Tue, 31 JUL 90 16:52:40 PDT
Date: 31 Jul 90 16:38:00 PDT
From: "GSSF::GOPPELT" <goppelt%gssf.decnet@scfd.nwc.navy.mil>
Subject: RE: Modifying the SUBMIT Verb
To: "info-vax" <info-vax@sri.com>

> What are the ramifications of changing the name of the SUBMIT command verb 
> in the DCLTABLES.EXE to be some other name and having all users on my 
> system execute a procedure that does some checking and then finally 
> submits their job calling the new name for the SUBMIT.EXE?  
>
> I want to be able to make users only use certain batch queues for processing.
>
> Are there other ways to accomplish this?

Yes!  About the easiest way would be to use ACLs (Access Control Lists). 
Create identifiers in AUTHORIZE :

	AUTH> ADD/ID QUEUE1
	AUTH> ADD/ID QUEUE2

Grant these identifiers to specific users :

	AUTH> GRANT/ID QUEUE1 TUTTLE
	AUTH> GRANT/ID QUEUE2 OHARA

Place an ACL on the batch queues :

	SET ACL/OBJECT_TYPE=QUEUE/ACL=(ID=QUEUE1,ACCESS=WRITE) queue-name-1
	SET ACL/OBJECT_TYPE=QUEUE/ACL=(ID=QUEUE2,ACCESS=WRITE) queue-name-2

Tighten down the batch queue access :

	SET QUEUE/PROTECTION=(W) queue-name-1
	SET QUEUE/PROTECTION=(W) queue-name-2

(Check your INIT/QUEUE startup command for any protection settings as well.)

Now only those users with the proper identifiers can submit jobs to the queues. 
User TUTTLE can submit jobs to "queue-name-1", but OHARA can not.  On the other
hand, OHARA can use "queue-name-2" but TUTTLE is excluded.  User SMITH, having
neither of the identifiers, can not submit jobs to either queue.

Users will get a "insufficient privilege" message when they attempt to submit a
job to the wrong queue.  This may not be as user friendly as you'd like.

I hope this will accomplish what you need...

				dave
------------------------------------------------------------------------------
|David S. Goppelt          |Internet: goppelt%gssf.decnet@nwc.navy.mil       |
|Naval Weapons Center      |          goppelt%gssf.decnet@26.3.0.85          |
|China Lake, CA  93555  USA|-------------------------------------------------|
|(619) 939-5023 av 437-5023|"I'm different than other people - pain hurts me"|
------------------------------------------------------------------------------

{The opinions expressed within this message are not necessarily those of the
author, the Naval Weapons Center, the United States Navy, the Federal
Government, the United States of America, the planet Earth, the Solar System,
nor the Milky Way Galaxy.  They are, however, the opinions of one Fred J.
Berfulmyer, who lives down the street from me.}