| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Controlling access for two apps to one local queue |
« View previous topic :: View next topic » |
| Author |
Message
|
| hdomin257 |
 Posted: Mon Jan 10, 2022 5:31 am Post subject: Controlling access for two apps to one local queue |
 |
|
Newbie
Joined: 27 Nov 2020
Posts: 7
|
Hello, I found the following question:
An administrator has been given the requirement to enable MQ queue in such a way that App1 can only put msgs to the queue and App2 can only get msgs from the queue. What is one way an administrator achieves this?
A) By creating two separate alias queues with required attributes
B) By controling access level for queue using queue attributes
C) By definning different policies for both applications at QMGR level
D) By controlling access at SVRCONN channel used by applications to connect to QMGR
First option seems possible, something like this
https://www.ibm.com/docs/en/ibm-mq/9.1?topic=pqs-using-alias-queues-distinguish-between-mqget-mqput-requests
B) doesn't seem right to me, I can't find queue attribute to control put/get specifically for apps. MQI authorizations are set by setmqauth control command, does it count like queue attribute?
C)Dont know much about policies, sorry, is it possible?
D) By controlling acces I understand restricting or permiting IPs at channel level. Do I get it wrong?
THX |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Mon Jan 10, 2022 5:53 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
Looks like a certification question.
What have you tried? What were the results?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon Jan 10, 2022 9:09 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| hdomin257 wrote: |
Hello, I found the following question:
An administrator has been given the requirement to enable MQ queue in such a way that App1 can only put msgs to the queue and App2 can only get msgs from the queue. What is one way an administrator achieves this? |
The requirement statement gave you clues (in bold). From your research and reading of official IBM administration documentation, what queue attributes address these?
There's an old saying that "Give a man a fish and he will eat for today; teach a man to fish, and he will eat forever."
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
