Arguments

 

usrnam

   OpenVMS usage:char_string
   type:         character-coded text string
   access:       read only
   mechanism:    by descriptor
   Name of the user whose security profile is to be returned. The
   usrnam argument is the address of a descriptor pointing to a text
   string containing the user name. The user name string can contain
   a maximum of 12 alphanumeric characters.

   For more information about user names, see the VSI OpenVMS Guide
   to System Security.
 

itmlst

   OpenVMS usage:item_list_3
   type:         longword (unsigned)
   access:       read only
   mechanism:    by reference
   Item list specifying the portions of the user's security profile
   to be replaced or augmented.

   To view the general format of an item descriptor and the fields
   description, see the VSI OpenVMS System Services Reference Manual.
 

flags

   OpenVMS usage:mask_longword
   type:         longword (unsigned)
   access:       read only
   mechanism:    by value
   The flags argument is used to control the behavior of the
   $CREATE_USER_PROFILE service. This argument does not accept ISS$
   mask values; therefore, continue to use the CHP$ mask values for
   this argument.

   The following table describes each flag:

   Symbol          Description

   CHP$M_          By default, $CREATE_USER_PROFILE initializes
   DEFCLASS        the security profile with the user's maximum
                   authorized classification. When this flag is set,
                   the service initializes the security profile from
                   the user's default classification instead. This
                   flag is Reserved to VSI.

   CHP$M_DEFPRIV   By default, $CREATE_USER_PROFILE initializes
                   the security profile with the user's authorized
                   privilege mask. When this flag is set, the
                   service initializes the security profile from
                   the user's default privilege mask instead.

   CHP$M_          Instructs the service not to access the user
   NOACCESS        authorization file (SYSUAF.DAT) or rights
                   database (RIGHTSLIST.DAT) to build the security
                   profile. This flag can be used as an optimization
                   when all the information necessary to build the
                   security profile is known to the caller.
 

usrpro

   OpenVMS usage:char_string
   type:         opaque byte stream
   access:       write only
   mechanism:    by reference
   Buffer to receive the security profile. The usrpro argument is
   the address of a buffer to receive the encoded security profile.
   If an address of 0 is specified, $CREATE_USER_PROFILE returns the
   size of the buffer needed in the usrprolen argument.
 

usrprolen

   OpenVMS usage:word
   type:         word (unsigned)
   access:       read/write
   mechanism:    by reference
   Word to receive the full size of the security profile. On input,
   the usrprolen argument specifies the length of the buffer pointed
   to by the usrpro argument. The usrprolen argument is the address
   of a word to which $CREATE_USER_PROFILE writes the actual length
   of the security profile. If the caller specifies a usrpro address
   of 0, $CREATE_USER_PROFILE returns the anticipated size, in
   bytes, of the buffer needed to hold the user's security profile
   in the usrprolen argument.
 

contxt

   OpenVMS usage:longword
   type:         longword (unsigned)
   access:       modify
   mechanism:    by reference
   Longword used to maintain authorization file context. The contxt
   argument is the address of a longword to receive a $GETUAI
   context value. On the initial call, this longword should contain
   the value -1. On subsequent calls, the value of the contxt
   argument from the previous call should be passed back in.

   Using the contxt argument keeps the UAF open across all calls,
   thereby improving the performance of the system on subsequent
   calls. To close the UAF, you must run down the image.

   The resulting context value from a $CREATE_USER_PROFILE call can
   also be used as the input contxt argument to the $GETUAI system
   service, and vice versa.