Indicates whether or not the CAN-DO function treats " @ " as the domain delimiter in a fully qualified user ID or as a regular character.

Data type: LOGICAL

Access: Readable/Writable

Applies to: SECURITY-POLICY system handle

If the CAN-DO-DOMAIN-SUPPORT attribute is TRUE, the CAN-DO function treats " @ " as a domain delimiter in a fully qualified user ID, as described in the main entry for the CAN-DO function. If the attribute is FALSE, the CAN-DO function treats " @ " as a regular character. For example:

  • When the attribute is set to TRUE, CAN-DO("abc","abc@") evaluates to TRUE because both strings are interpreted as user abc in the blank domain.
  • When the attribute is set to FALSE, CAN-DO("abc","abc@") evaluates to FALSE.

The behavior of the CAN-DO function regarding " @ " can be changed at any time in a session by setting the CAN-DO-DOMAIN-SUPPORT attribute appropriately. The attribute defaults to TRUE unless the -nocandodomain startup parameter is used, in which case the attribute defaults to FALSE. For more information on the -nocandodomain startup parameter, see the Startup Command and Parameter Reference.