ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » How to grant read only access?

Post new topic  Reply to topic
 How to grant read only access? « View previous topic :: View next topic » 
Author Message
bireland
PostPosted: Fri Jun 16, 2006 12:07 pm    Post subject: How to grant read only access? Reply with quote

Newbie

Joined: 16 Jun 2006
Posts: 1
Location: Columbus, Ga.

I’m running version 5.3 on a Windows 2003 server. I want to grant read only access to a local group called MyGroup for queue manager MyQmngr and all its queues. I’ve run the following commands.

setmqaut -m MyQmngr -t qmgr -g MyGroup +connect +inq +dsp

setmqaut -m MyQmngr -t queue -g MyGroup -n SYSTEM.ADMIN.COMMAND.QUEUE +inq +dsp +put

setmqaut -m MyQmngr -t queue -g MyGroup -n SYSTEM.DEFAULT.MODEL.QUEUE +dsp +inq +get

I’ve created a test user in MyGroup called test. At this time, this user can’t open the MQservices applet unless I add him the the mqm group. When he is part of the mqm group, he has full administrative rights. What am I doing wrong?
Back to top
View user's profile Send private message
PeterPotkay
PostPosted: Fri Jun 16, 2006 2:44 pm    Post subject: Reply with quote

Poobah

Joined: 15 May 2001
Posts: 7722

You haven't given any read access to queues other than the 2 listed.

Use the Search button. This topic has been discussed lots.
_________________
Peter Potkay
Keep Calm and MQ On
Back to top
View user's profile Send private message
Nigelg
PostPosted: Mon Jun 19, 2006 12:03 am    Post subject: Reply with quote

Grand Master

Joined: 02 Aug 2004
Posts: 1046

The second best way, and the easiest, to find the problem is to enable qmgr auth events, run the test, and check the msgs in the event queue. The msgs will ocntain the name of the object and the missing authority.

The best way, but not the easiest, is to take a trace and look at the auth mask in the trace file when getting auth for a particular object.
_________________
MQSeries.net helps those who help themselves..
Back to top
View user's profile Send private message
MQALearner
PostPosted: Mon Jun 19, 2006 6:31 am    Post subject: Reply with quote

Newbie

Joined: 10 Jun 2006
Posts: 9

U can Check in page 392 or 368 in sys admin Gudie
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Installation/Configuration Support » How to grant read only access?
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.