MQSeries.net :: View topic

gdrucker · Posted: Mon Jun 15, 2009 12:13 pm Post subject:

Windows 2003 MQ V6.2.6

I am trying to set up authority for a group who can basically have inquiry only functionality to all queues and channels. I ran the script listed below. After testing, it seems to work as intended but as soon as the user expands the queue manager, we log event warnings about user not having "dsp" authority on SYSTEM.AUTH.DATA.QUEUE. Any ideals? I'm stumped!

Script:
setmqaut -m QM_TEST -t qmgr -g MQDevelopers -all +inq +connect +dsp

setmqaut -m QM_TEST -n ** -g MQDevelopers -t q -all +inq +dsp +browse +get +put

setmqaut -m QM_TEST -n SYSTEM.ADMIN.COMMAND.QUEUE -t q -g MQDevelopers -all +inq +dsp +put
setmqaut -m QM_TEST -n SYSTEM.DEFAULT.MODEL.QUEUE -t q -g MQDevelopers -all +allmqi +dsp

setmqaut -m QM_TEST -n ** -g MQDevelopers -t channel -all +dsp
setmqaut -m QM_TEST -n ** -g MQDevelopers -t clntconn -all +dsp
setmqaut -m QM_TEST -n ** -g MQDevelopers -t namelist -all +dsp +inq
setmqaut -m QM_TEST -n ** -g MQDevelopers -t process -all +dsp +inq
setmqaut -m QM_TEST -n ** -g MQDevelopers -t authinfo -all +dsp +inq
setmqaut -m QM_TEST -n ** -g MQDevelopers -t service -all +dsp
setmqaut -m QM_TEST -n ** -g MQDevelopers -t listener -all +dsp

dspmqaut -m QM_TEST -t qmgr -g MQDevelopers
dspmqaut -m QM_TEST -n ** -t q -g MQDevelopers
dspmqaut -m QM_TEST -n ** -t channel -g MQDevelopers
dspmqaut -m QM_TEST -n ** -t clntconn -g MQDevelopers

Event log error:
Event Type: Warning
Event Source: WebSphere MQ
Event Category: None
Event ID: 8077
Date: 6/15/2009
Time: 10:24:22 AM
User: N/A
Computer: testxxx
Description:
Entity 'testuser' has insufficient authority to access object 'SYSTEM.AUTH.DATA.QUEUE'.

The specified entity is not authorized to access the required object. The following requested permissions are unauthorized: dsp

Ensure that the correct level of authority has been set for this entity against the required object, or ensure that the entity is a member of a privileged group.