\documentstyle[11pt]{article}
\pagestyle{empty}
\parindent=0pt
\parskip=0.5\baselineskip
\oddsidemargin=0.25in
\textwidth=6in
\begin{document}

\vspace*{-1.5in}
\begin{center}
{\LARGE\bf MASTER}

{\large\bf A Program for Project Masters}

\end{center}

\vspace{\baselineskip}
The MASTER program is used by project masters\footnote{Project masters are
those holding the {\sf proj\_MASTER} identifier.} to grant, revoke, and list
project identifiers for users.

The MASTER program is run using the {\tt MASTER} command.  The {\tt MASTER}
command is a foreign command of the form:
\begin{verbatim}
    $ MAS*TER == "$dev:[dir]MASTER.EXE"
\end{verbatim}
It must be installed with SYSPRV, CMKRNL, and WORLD privileges.

Command syntax:
\begin{verbatim}
    $ MASTER GRANT[/SURE][/NOTNOW] identifier username
    $ MASTER REVOKE[/SURE][/NOW]   identifier username
    $ MASTER LIST                  identifier
\end{verbatim}

\begin{description}
\item[{\tt /SURE}] suppresses the ``Are you SURE'' question for
	granting/revoking the {\sf proj\_MASTER} identifier itself.
	Since the {\sf proj\_MASTER} identifier conveys the power to
	grant/revoke identifiers as well as fairly unlimited file access,
	the MASTER program requires confirmation of such actions.
\item[{\tt /NOTNOW}] does not grant the identifier to existing processes; the
	default action is to grant the identifier to existing processes.
\item[{\tt /NOW}] revokes the identifier from existing processes; the default
	action is not to revoke the identifier from existing processes.
\end{description}

Note that, due to restrictions in the system services which perform these
tasks\footnote{\$GRANTID and \$REVOKID}, only existing processes on the same
node as the process issuing the command are updated; any users on other nodes
must log out and back in for the changes to take effect.

Once dynamic identifiers have been granted to a user, they may be enabled and
disabled at any time with the {\tt SET RIGHTS} command.  Note that there are
two concepts dealing with identifiers:
\begin{enumerate}
\item Granting and Revoking: management level
\item Enabling and Disabling: user/program level
\end{enumerate}
If a user is granted a dynamic identifier, he
may enable or disable it.  If the user does not have an identifier
(it may have been revoked), he cannot enable it.  If a user is granted
an identifier, it is enabled by default and must be explicitly disabled.
\end{document}