| Author |
Message
|
| KIT_INC |
 Posted: Mon Nov 03, 2008 10:32 am Post subject: Authority to all queues |
 |
|
Knight
Joined: 25 Aug 2006
Posts: 589
|
This is a development environment on MQ V6 on AIX
I need to give put and get authority to a user group for all queues.
I tried
setmqaut -m STEST -t queue -n * -g mqdevlpr +put +get
I got
$setmqaut -m STEST -t queue -n * -g mqdevlpr +put +get
AMQ7095: An entity name is required but you did not specify one.
Usage: setmqaut [-m QMgrName] [-n ObjName] -t ObjType (-p Principal | -g Group)
[-s ServiceComponent] Authorizations
I know that
$setmqaut -m STEST -t queue -n A* -g mqdevlpr +put +get
will work.
But this will mean that I have to do this for every possible prefrix
Is there a easier way to do this? |
|
| Back to top |
|
 |
| PeterPotkay |
| Posted: Mon Nov 03, 2008 11:57 am Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| Code: |
| setmqaut -m STEST -t queue -n "*.**" -g mqdevlpr +put +get |
Do you really want them putting and getting from your SYSTEM.* queues, even on a test server?
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| KIT_INC |
| Posted: Mon Nov 03, 2008 12:09 pm Post subject: |
|
|
Knight
Joined: 25 Aug 2006
Posts: 589
|
Thanks, I'll try the *.** when I have access to the server.
I probably do not want put and get to the SYSTEM queues. But I can alway -get -put on SYSTEM*
Is that true? |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Mon Nov 03, 2008 12:12 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
| KIT_INC wrote: |
Thanks, I'll try the *.** when I have access to the server.
|
Try "*.**", not *.** 
| KIT_INC wrote: |
I probably do not want put and get to the SYSTEM queues. But I can alway -get -put on SYSTEM*
Is that true? |
How about -all for that group for the SYSTEM.* queues - they do not even need to be able to look at that them, right?
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| KIT_INC |
| Posted: Tue Nov 04, 2008 11:32 am Post subject: |
|
|
Knight
Joined: 25 Aug 2006
Posts: 589
|
Thanks a lot
The setmqaut using -t queue -n "*.**" seems to work. I got successful message.
however
$dspmqaut -m STEST -t queue -n "*.**" -g mqdevlpr
AMQ7085: Object *.**, type queue not found.
Can I also use such wild card in dspmqaut? |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Nov 04, 2008 11:44 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
I'd like to suggest that authorizations in your test environment look just like QA and production.
If you perfect your authorizations in test, then the authorizations will easily percolate to QA and production along with the applications.
This demonstrates (to management and auditors) that testing yields (or will yield) results that will be the same as the application percolates from test to QA to production.
Authorizations to WMQ objects should be based on application need. I'm guessing that the programmers want this access to be able to clean up bad messages that result from application testing and debugging. Since no application can be 100% tested, what will the programmers do when bad messages get created in production? The answer: write an application program that deals with bad messages, test it, percolate it along with other applications.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| PeterPotkay |
| Posted: Tue Nov 04, 2008 1:17 pm Post subject: |
|
|
Poobah
Joined: 15 May 2001
Posts: 7722
|
Without disagreeing with anything Bruce said....
Take a look at the dmpmqaut command, not dspmqaut.
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
|
| KIT_INC |
| Posted: Wed Nov 05, 2008 9:30 am Post subject: |
|
|
Knight
Joined: 25 Aug 2006
Posts: 589
|
I agreed 100%
Thanks for the help. |
|
| Back to top |
|
|
|
|
