List of WHO has what Wizards?

• Use the program whohaswizard.ksh in /Work/NDL (neter only)
• It will prompt you to select a GROUP from a list (select the group that will contain the wizard(s) you are interested in tracking down

  
  $ whohaswizard.ksh
  Here are the various groups that wizards are in.
  
  ACQ
  AUTH
  CAT
  CIRC
  REQUEST
  RESERVE
  RIM
  SERIAL
  TOOL
  UTILITY
  
  Please select a group from the list that you want to see wizards for.
  
  

• Once the GROUP has been selected, a list of that group's wizards will be given to you. Select, from the given list, the wizard that you want to track down WHO has authorization to use it.

  
  Please enter the GROUP from the list above that you want to see wizards for.AUTH
  
  Here are the wizards in the group you selected:
  AUTHCREATE|
  AUTHDISP|Display Authority Record
  AUTHDUP|Duplicate Authority Record
  AUTHEDIT|Edit Authority Record
  AUTHREMOVE|Remove Authority Records
  
  Please select a WIZARD from the list that you want to see WHO has this wizard:
  
  
  

• You will get a list of the User Accesses (used and UNUSED) who have access to the wizard you requested.

If you know the wizard(s) you want to find out WHO has authorization to use

• Use the program whohaswizardv2.ksh in Work/NDL (neter only)

  
  $ whohaswizardv2.ksh 
  ERROR:  whohaswizardv2.ksh 
  $ whohaswizardv2.ksh AUTHCREATE
  
  

• Sample output:

  
       The following user access have access to AUTHCREATE:
       ...report produced on neter.lib.ucalgary.ca Tue Dec 13 09:27:29 MST 2005
       =================================================
  
  SIRSI|
  ADMIN|
  ....
  
  

• This program removes unused user accesses from the resulting list if uacsunusedlist2.ksh is run FIRST and the edited results are put int the unuseduacs.bak file.

  
     #Remove from the list any which are in the unuseduacs.bak file (results of
     #running uacsunusedlist2.ksh) List of UACS with NO associated wkstn user
     #record.
  
  

• If you refresh the unueduacs.bak file by re-running uacsunusedlist2.ksh, make sure that you only have the raw list of unused user access in the unuseduacs.bak file and no report headers etc. The unuseduacs.bak file should be like this:

  
  ACCOUNTS
  ACQ
  ACQMIN
  ACQSER
  ADMINSTM
  ALUFT
  AMVANDEN
  ANDERSCJ
  ANEEDHAM
  AUCNUC
  AWALSH
  BADICK
  unuseduacs.bak (17%)
  
  

• Normal output from uacsunusedlist2.ksh is:

  
            Unused Users Access Listing
            ===========================
        ...produced on neter.lib.ucalgary.ca Thu Feb 20 12:32:07 MST 2003
  
  EMC is an unused UACS with ACCESSLIST.10 associated.
  AMVANDEN is an unused UACS with ACCESSLIST.13 associated.
  ACQ is an unused UACS with ACCESSLIST.16 associated.
  ACQMIN is an unused UACS with ACCESSLIST.23 associated.
  BRATKE is an unused UACS with ACCESSLIST.24 associated.
  PEARCE is an unused UACS with ACCESSLIST.28 associated.
  ...
  
  

Listing all User Accesses and their Command Lists which relate to their list of authorized Wizards

• Use the program uacscmdl.ksh in /Work/NDL
• Sample output:

  
            List of all USED UACS and their CMDL
            ====================================
        ...produced on neter.lib.ucalgary.ca Mon Nov  7 09:08:01 MST 2005
  
  user login|name|command list|file access number|property file|UACS
  DAVIDSOA|Davidson, Allison|ACCTPLUS|308|site|DAVIDSOA
  MARGOLIS|Margolis, Pauline|ACCTPLUS|14|site|MARGOLIS
  SEMPLE|Semple, Barb|ACCTREM|15|site|SEMPLE
  ADFORTE2|Forte, Andrew|ACQMIN|272|acq|ADFORTE2
  AEDWARD|Edwards, Angela|ACQMIN|249|acq|AEDWARD
  JAMESK2|James, Kathleen|ACQMIN|319|acq|JAMESK2
  ....
  

• This information has been extracted from Unicorn/Config/admin
• Sample lines from this file that are used in the program uacscmdl.ksh are:

  CMDL|17|ACQMIN|YlYAJAJIJGDlDKDHDEDADIDtDGGHGAGIGGKAIAIIIGfAHFdOUISASS||
  
  UACS|25|LAL|17|1|wsclient ||3|0|1||0||0|acq|0|
  
  

• The meaning of these fields in these two line are:
• CMDL or commandlist|Number|Name|command codes (2letter codes)|description|
• The UACS line is as follows:
  1. UACS| - this is the abbreviation for User Access
  2. ###| this field carries the number associated with this UACS and relates to the list of authorized wizards this UACS can access in /Workflows/Access/ACCESSL IST.###

  3. NDLALL| this field carries the "name" of the UACS as setup in CHUI or WF and is generally the email address of our staff member
  4. ##| relates to the number of the command list associated with this UACS
  5. ##|- number of simultaneous logins allowed for this User access
  6. wsclient updategui etc...| what utilities this UACS can access
  7. acq admin custom etc...| report groups this UACS can access
  8. Field 8 is equal to user level where:
     1. extended public
     2. public
     3. staff
     4. supervisor
     5. sysadmin
  • field 12 is PERSONAL (value 0) or SHARED (value 1), personal allows one to update their PIN via WebCat's user services so we selected to use PERSONAL for all global logins.
  • field 15 is obviously the property fiel name that this UACS is delivered when used within WorkFlows.
  • I have not had a need to figure out fields 9 through 11, 13-14 and 16. Some of these would relate to these features of the UACS:

                  * Description :
      * Accountability Operator : NO
                 * Request List : STAFF
        * Workstation Utilities :
    
    

• Wizards for each person are found in Unicorn/Workflows/Access and carry the person's UACS number (as listed above in my program's output-field 3). I have created the wizard groups based on the original command lists so that if a person has command list X look for the related wizard file to cp over his/her ACCESSLIST.### file where ### is the number equal to his UACS number given in the output of the program (field 3).

  ACCESSLIST.accounts2001     ACCESSLIST.copyfixcre2001
  ACCESSLIST.acctplus2001     ACCESSLIST.copyfxbind2001
  ACCESSLIST.acqmin2001       ACCESSLIST.desjardi2001
  ACCESSLIST.acqmin2001b      ACCESSLIST.dkbrown2001
  ACCESSLIST.acqrem2001       ACCESSLIST.dmacdoug2001
  ACCESSLIST.acqser2001       ACCESSLIST.dourefcirc2001
  ACCESSLIST.cat2001          ACCESSLIST.finalpr2001
  ACCESSLIST.catcirc2001      ACCESSLIST.ilmorgan2001
  ACCESSLIST.cateditord2001   ACCESSLIST.lowrie2001
  ACCESSLIST.catmin2001       ACCESSLIST.mairef2001
  ACCESSLIST.catser2001       ACCESSLIST.nashcirc2001
  ACCESSLIST.circ2001         ACCESSLIST.ppival2001
  ACCESSLIST.circdds2001      ACCESSLIST.public2001
  ACCESSLIST.circddsplu2001   ACCESSLIST.ser2001
  ACCESSLIST.circmin2001      ACCESSLIST.sermax2001
  ACCESSLIST.circmincre2001   ACCESSLIST.sermin2001
  ACCESSLIST.circminemc2001   ACCESSLIST.serplus2001
  ACCESSLIST.circminres2001   ACCESSLIST.tflander2001
  ACCESSLIST.circpluscr2001   ACCESSLIST.tiessen2001
  ACCESSLIST.circplusres2001  
  ACCESSLIST.copyfix2001    
  

• Property files (field 4 of the program's output) are in Unicorn/Config/Properties (but I develop them with programs in Work/NDL/comparepropertiesfile.ksh and createpropertiesfile.ksh and squirrel away building blocks into Work/NDL/Wfproperties)