Posted: Wed Jan 14, 2004 7:18 am Post subject: creating custom groups
Novice
Joined: 09 Oct 2003 Posts: 14
hi - on our box we are running mq series 5.3 csd 05 on a solaris 2.8 box.
i am looking to create new custom groups that have specific mq permissions. for example - i need to assign user id's to be part of custom 'groups' - where the custom groups have specific permissions to put to certain queue(s) and other custom groups to have specific permissions to get from certain queues.
for example - if there are queues A & B.
User1 would be part of GROUP1 that can only put to queue A
User2 would be part of GROUP2 that can only put to queue B
User3 would be part of GROUP3 that can only get from queue A & B
how do i create the GROUPs so they have these specific permissions?
does the user mqm have to do this - or can a user that is part of the mqm group do this activity?
Joined: 13 Jun 2002 Posts: 2607 Location: The Netherlands (Amsterdam)
first of all MQ rights are assigned and stored on primary group level on UNIX.
creation of the primary groups is an operating system responsability.
so in your case you need your OS administrator to
create primairy groups: grp1, grp2, grp3
set primairy group (gid) of user1 to grp1
set primairy group (gid) of user2 to grp2
set primairy group (gid) of user3 to grp3
Then...
assign put rights to queue A to grp1 using setmqaut
assign put rights to queue B to grp2 using setmqaut
assign get rights to queue A&B to grp3 using setmqaut
Last 3 assignments can be done by a user that is part of the mqm group.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum