AIX

No sudo expert here but do use it and I was thinking that the % sign in front of a value was to allow everyone in that group to execute the command. You said you have two different users not two different groups. Maybe it works the same for users as well so I may be off base here and if so I apologize for mudding up the water evern worse.

I would expect to see something like

User_Alias APPUSER=appuser
Cmnd_Alias APP = /usr/app.sh
APPUSER ALL= PASSWD: APP

I am no expert, but try this

$ sudo su - appusr /bin/app.sh

What is the exact output of sudo -l for the user in question?

And what happens if you run:

Code:

sudo -u appadmin /usr/app.sh

With the original config of sudo that you had.

Many thanks it's working

As system admin i decided not to give shell access to users and even application admins on production systems.
I give them access via a simple webpage and the menus are suid capable.
So, even root commands can be granted to someones menu.
I like the fact that no commandline trying or messups are possible.

Fjd.