ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » profile @class vs. profile **

Post new topic  Reply to topic
 profile @class vs. profile ** « View previous topic :: View next topic » 
Author Message
flaufer
PostPosted: Fri Oct 08, 2010 2:08 am    Post subject: profile @class vs. profile ** Reply with quote

Acolyte

Joined: 08 Dec 2004
Posts: 59

Folks,

I have trouble understanding the difference between profile @class against profile '**'.

See this output from dmpmqaut


- - - - - - - -
profile: @class
object type: queue
entity: someuserid
entity type: group
authority: none
- - - - - - - -
profile: **
object type: queue
entity: someuserid
entity type: group
authority: get browse inq dsp
- - - - - - - -

I wonder, where the difference is... it's a bit hard to crawl through google searching for '**' or '@class'...

Is there a document which explains more about the '@class' profile than the ONE reference I found in the information center?

(add: I found only one reference in the doc for dmpmqaut: http://publib.boulder.ibm.com/infocenter/wmqv6/v6r0/index.jsp?topic=/com.ibm.mq.csqzaj.doc/sc12720_.htm)

Is there some sort of order which is used when trying to apply OAM authority settings when an object is being accessed?

(add: this I found, however classes are not listed)

Can @class profiles be changed at all with setmqaut?

Felix
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Fri Oct 08, 2010 5:41 am    Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

AFAIK the @class profile allows you to manipulate objects of the class i.e. create, delete etc... regardless of the name to be attributed to the object.

Have fun
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
flaufer
PostPosted: Fri Oct 08, 2010 5:43 am    Post subject: but then, there is no difference? Reply with quote

Acolyte

Joined: 08 Dec 2004
Posts: 59

fjb_saper wrote:
AFAIK the @class profile allows you to manipulate objects of the class i.e. create, delete etc... regardless of the name to be attributed to the object.

Have fun :innocent:


Hmm... thenwhat is the difference between @class and ** ?

Felix
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Fri Oct 08, 2010 5:47 am    Post subject: Re: but then, there is no difference? Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20696
Location: LI,NY

flaufer wrote:
fjb_saper wrote:
AFAIK the @class profile allows you to manipulate objects of the class i.e. create, delete etc... regardless of the name to be attributed to the object.

Have fun


Hmm... thenwhat is the difference between @class and ** ?

Felix

** will allow you to alter any of the objects. It may not allow creation or deletion.

xyz** will allow for manipulating any object starting with xyz. The double '*' allows to ignore any '.' separator down the line in the object name
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » profile @class vs. profile **
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
 
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.