| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| ' DEFINE' command request not authorized |
« View previous topic :: View next topic » |
| Author |
Message
|
| ocm7 |
 Posted: Sat Oct 22, 2011 2:22 pm Post subject: ' DEFINE' command request not authorized |
 |
|
Newbie
Joined: 22 Oct 2011
Posts: 3
|
Hello, before I go on to explain my problem I'll mention that this is NOT a work problem, I am a student and this is a class problem.
So I've got this Queue manager (MQXX) in which I need to create a trigger Qmgr with the name [USERID].REPLY using the IBM WebSphere MQ for z/OS panel under z/OS, however I am getting ' DEFINE' command request not authorized whenever I try to create this QLOCAL. What troubles me is that if I issue from ISPF 'RLIST MQCMDS *' it lists that my access to MQXX.DEFINE.QLOCAL is ALTER, yet when looking at the MQXXMSTR (job ID for MQXX) SDSF logs it lists something like:
| Code: |
ICH408I USER([USERID] ) GROUP([GROUPID] ) NAME([NAMEID] )
MQXX.QUEUE.[USERID].REPLY CL(MQADMIN)
INSUFFICIENT ACCESS AUTHORITY
FROM MQXX.** (G)
ACCESS INTENT(ALTER ) ACCESS ALLOWED(NONE )
|
which makes me think that there must be some way I can issue the define command using the MQCMDS class and not MQADMIN, is this correct? Or is there something else that I'm missing/doing wrong?
I have emailed my professors however I haven't received a reply and I am in a bit of a hurry, so please don't answer with "you need to contact support/tech staff", that has been done at no avail.
Thanks, ocm7
Edit: I do not have permission to issue SETROPTS or REFRESH SECURITY commands, so modifying permissions is out of the question. |
|
| Back to top |
|
 |
| bruce2359 |
| Posted: Sat Oct 22, 2011 4:00 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
The errors from RACF you received is pretty clear: your userid does not have sufficient authority to define the queue.
| Quote: |
FROM MQXX.** (G)
ACCESS INTENT(ALTER ) ACCESS ALLOWED(NONE ) |
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| Vitor |
| Posted: Sat Oct 22, 2011 5:01 pm Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| bruce2359 wrote: |
| The errors from RACF you received is pretty clear: your userid does not have sufficient authority to define the queue. |
The RACF profile you quoted gives you the authority to run a DEFINE command. You're failing against the queue authority; see here (specifically Table 1)
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| ocm7 |
| Posted: Sat Oct 22, 2011 6:55 pm Post subject: |
|
|
Newbie
Joined: 22 Oct 2011
Posts: 3
|
Ok, I understand. Running 'RLIST MQADMIN * ' won't list any permissions for MQXX.QUEUE.* so, I'll have to wait for IBM to fix this. One would figure that if IBM is organizing a contest they would do it right :|
Thanks guys |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Sat Oct 22, 2011 7:08 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
| ocm7 wrote: |
| One would figure that if IBM is organizing a contest they would do it right :| |
Huh? What contest?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| ocm7 |
| Posted: Sat Oct 22, 2011 7:39 pm Post subject: |
|
|
Newbie
Joined: 22 Oct 2011
Posts: 3
|
| IBM Master the Mainframe Mexico 2011 |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
