| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Different permissions for a userID for two different QM |
« View previous topic :: View next topic » |
| Author |
Message
|
| queuemanager |
 Posted: Thu Sep 13, 2007 3:58 am Post subject: Different permissions for a userID for two different QM |
 |
|
Apprentice
Joined: 28 Nov 2006
Posts: 43
Location: Bangalore
|
Hi All,
We have following scenario :
We are using same system for our production and UAT setups.
We have created two queuemanagers, one for production(say QMPRD) and other for UAT(say QMUAT) on the same system.
Environment is MQV6 on Windows
My query is :
Is there any way so that we can give permissions for administration for a userID(say Testusr) so that this Testusr will not be able to access the production queuemanager(QMPRD) while doing all admin task on the UAT queuemanager(QMUAT).
Thanks in advance for ur replies.
Thanks & Regards
Prajit Sharda |
|
| Back to top |
|
 |
| Vitor |
| Posted: Thu Sep 13, 2007 4:17 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
Yes - permissions are at queue manager level, so just authorise that user id correctly on each system. Or not authorise as the case may be.
And don't make the user in question a member of group mqm on the box.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| queuemanager |
| Posted: Mon Sep 17, 2007 2:11 am Post subject: |
|
|
Apprentice
Joined: 28 Nov 2006
Posts: 43
Location: Bangalore
|
Hi Victor,
Thanks for the reply.
If I don't include Testusr in mqm group, I'll not be able to issue administration commands like strmqm, endmqm etc. Also, I'll not be able to go to runmqsc prompt to issue MQSC commands.
Please reply.
Thanks & Regards
Prajit Sharda |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon Sep 17, 2007 2:19 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| queuemanager wrote: |
If I don't include Testusr in mqm group, I'll not be able to issue administration commands like strmqm, endmqm etc. Also, I'll not be able to go to runmqsc prompt to issue MQSC commands.
|
I apologise for being unclear. What I was trying to convey is that membership of the mqm group overrides the set permissions, so don't include the user in that group in situations where you want to limit permissions.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| gs |
| Posted: Tue Sep 18, 2007 1:14 am Post subject: |
|
|
Master
Joined: 31 May 2007
Posts: 254
Location: Sweden
|
Only admins should be in the MQM group.
Your friendly commands here are setmqaut & dspmqaut. These are used per queue manager. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
