| Author |
Message
|
| sundar |
 Posted: Sun Jun 05, 2005 3:42 am Post subject: Access Control on MQObjects |
 |
|
Newbie
Joined: 05 Jun 2005
Posts: 7
|
Hi,
I need to acheive access control on MQ objects.Only restricted users must access certain queues .How do I get this done? |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Sun Jun 05, 2005 5:33 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
|
| Back to top |
|
|
| sundar |
| Posted: Mon Jun 06, 2005 2:40 am Post subject: |
|
|
Newbie
Joined: 05 Jun 2005
Posts: 7
|
Hi ,
I have tried using
setmqaut -m qManager -n qName -t queue -p userid -all
and have also performed refresh security , but still its not working out.
Do I have to do anything more??
OR Is there anything wrong with the command or setup???
Any suggestions??? |
|
| Back to top |
|
|
| sebastianhirt |
| Posted: Mon Jun 06, 2005 4:24 am Post subject: |
|
|
Yatiri
Joined: 07 Jun 2004
Posts: 620
Location: Germany
|
Hi,
what OS are you running? There are some specialities. On Windows for example, everybody who is in one of the groups Administrators, System or MQM, has sort of full control access.
cheers
Sebastian |
|
| Back to top |
|
|
| sundar |
| Posted: Mon Jun 06, 2005 5:56 am Post subject: |
|
|
Newbie
Joined: 05 Jun 2005
Posts: 7
|
hi
Running on AIX OS.For a particular userid I could restrict access to a queue which I have mentioned.
But for the same userid I couldn't access other queues...does the restriction will be applied for all queues..? |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon Jun 06, 2005 8:15 am Post subject: |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| sundar wrote: |
Hi ,
I have tried using
setmqaut -m qManager -n qName -t queue -p userid -all
and have also performed refresh security , but still its not working out.
Do I have to do anything more??
OR Is there anything wrong with the command or setup???
Any suggestions??? |
Well that's nice and will fix access to the queue. I usually go with +allmqi.
If you use -all you remove all access.
Remember as well to give at least connect and enquire to the qmgr.
And like I said, don't do it at the user level, do it at the group level and have the user be member of said group at OS level.
And check that the user is not in another group giving him the access you are trying to remove....
mqm group has access to everything!
Enjoy  |
|
| Back to top |
|
|
|
|
