| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Is it possible to disable property fields in MMC |
« View previous topic :: View next topic » |
| Author |
Message
|
| Biju |
 Posted: Mon Dec 05, 2005 11:19 pm Post subject: Is it possible to disable property fields in MMC |
 |
|
Acolyte
Joined: 03 Oct 2005
Posts: 71
|
Hi Guys,
I just wanted to ask if it is possible to disable the property fields of MQ objects, once they are created, in the MMC. If yes how can we do that? Any help would be apreciated. 
Regards,
Bijish |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Tue Dec 06, 2005 4:22 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
You mean, prevent certain people from accessing or changing certain properties?
No.
But regular MQ security can be used to prevent them from altering the objects underneath.
Also, you could possibly write some extension points to the Eclipse based MQ Explorer to do this. But again, regular MQ Security is likely a better option.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Biju |
| Posted: Tue Dec 06, 2005 6:31 am Post subject: |
|
|
Acolyte
Joined: 03 Oct 2005
Posts: 71
|
Hi Jeff,
Thank you for your reply. Yes you got me right .
I am using WMQ v5.3 with CSD05 on Solaris 8. The monitoring / administration is done from a Win2K machine which has the Explorer(MMC). If you could guide me to achieve the same that will be great. Thnk you once again.
Regards,
Bijish |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Dec 06, 2005 6:47 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
There are specific permissions that control which users/prinicples can perform what types of actions on MQ objects. The list of the permissions available for v6 is here.
The difficulty comes in if the users logging in to do the monitoring are a) members of the Administrators group, or b) members of the mqm group. If the users are in either group, you can not limit their access.
If they are not in those groups, then you can deny them the chg permission on all objects and be okay.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| Biju |
| Posted: Tue Feb 14, 2006 10:57 pm Post subject: |
|
|
Acolyte
Joined: 03 Oct 2005
Posts: 71
|
Hello All,
I would like to have a clarification. Let me explain the scenario we have first.
We have a solaris box (SunOS 5. on which MQ version v5.3 with CSD05 is running. For monitoring we use a Win2K system where support guys use the explorer. I want to prevent them from making any change in the atributes of objects knowingly or unknowingly.
After reading out the System admini guide I could understand the following to achieve my goal...Please correct if I go wrong.
1. Create a group which has no admin or mqm rights.
2. Create a user and add it to the group created
2. Use setmqaut command to give the needed authority for the user to use the QM.
3. Put the username as MCA user in SYSTEM.ADMIN.SVRCONN CHANNEL.
4. Refresh security.
The commands I intend to use are:
setmqaut -m QM.TEST -t qmgr -g mqmuser +all -chg -dlt
setmqaut -m QM.TEST -t q -n *.** -g mqmuser +all -chg -dlt
Now if I use explorer to connect to the QM I would get the authorities given to the user specified in MCA user id of SYSTEM.ADMIN.SVRCONN CHANNEL.
It worked fine for me. I there anything else which would give me the same result or are there any suggestions to improve the approach mentioned. Please give your insights. Thank you.
Warm Regards |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
