MQSeries.net :: View topic - AMQ8077 errors coming in QM logs for all the queue objects

Mangesh1187 · Posted: Wed Jan 21, 2015 3:38 am Post subject:

Hi All,

First of all wish you a very happy new year to all. This is my first post in 2015.

I have a queue manger, QM1 (WebSphere MQ V7.5.0.3) created, and a server connection channel for any remote machine to connect using MQ Explorer.
I have set the MCAUSER(user1) and given following autnthtication to it.
setmqaut -m QM1 -t qmgr -g user1 -all
setmqaut -m QM1 -t qmgr -g user1 +dsp +setall +connect +inq

I have given the required autheitications for SYSTEM.MQEXPLORER.REPLY.MODEL,SYSTEM.ADMIN.COMMAND.QUEUE , TESTQ only.
MQ Explorer conenctivity is fine. But I can see serveral messages in QM1 error logs like below for almost all queues.

01/21/2015 02:14:08 PM - Process(4966.7) User(mqm) Program(amqzlaa0)
Host(hkl100429.hk.hsbc) Installation(Installation1)
VRMF(7.5.0.3) QMgr(DHKL100429)

AMQ8077: Entity 'user1 ' has insufficient authority to access object
'SYSTEM.SELECTION.EVALUATION.QUEUE'.

EXPLANATION:
The specified entity is not authorized to access the required object. The
following requested permissions are unauthorized: dsp
ACTION:
Ensure that the correct level of authority has been set for this entity against
the required object, or ensure that the entity is a member of a privileged
---------------------------------------------------------------------------------------------------------------------
I have alredy gone throuh the link http://stackoverflow.com/questions/11832788/websphere-mq-explorer-amq8077-errors
which explainied why those many errors occured.
The MQ Explorer which trying to connect , want to see all the system queues and since it dont have authentications its logging above error.

The resolution given in above link is to give +dsp authentications to all the queues.

But I dont want to show these addtional queues to MQ Explorer users, witout causing the above erros in QM1 logs.
Is there any way to achieve this ?

Need your feedback for the same ....

Thanks in advance,
Mangesh Khandale