| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Group that could create MQ Objects |
« View previous topic :: View next topic » |
| Author |
Message
|
| rparti |
 Posted: Thu Aug 09, 2007 8:17 am Post subject: Group that could create MQ Objects |
 |
|
Voyager
Joined: 05 Oct 2005
Posts: 86
Location: U.S.A.
|
Consider that user1 is member of mqm group and another group aixsecurity.
If user1 creates mqm objects then any user that is part of aixsecurity will also get rights to modify the mqm objects created by user1. (assuming that other members of aixsecurity are not in mqm group)
I'm not sure where I read the above, but i remember reading it.
Assuming the above statement is correct, would appreciate your opinion on the following question. If it is not correct, then let me know.
The question is:
1) Is it better to always su as mqm and then create/modify mqm objects....but this why you have no record of which member of mqm created mqm objects
or
2) Is is better to create users that are members of no other group but mqm, and then these users modidy/create mqm objects
Thanks |
|
| Back to top |
|
 |
| jeevan |
| Posted: Thu Aug 09, 2007 9:06 am Post subject: Re: Group that could create MQ Objects |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| rparti wrote: |
Consider that user1 is member of mqm group and another group aixsecurity.
If user1 creates mqm objects then any user that is part of aixsecurity will also get rights to modify the mqm objects created by user1. (assuming that other members of aixsecurity are not in mqm group)
I'm not sure where I read the above, but i remember reading it.
Assuming the above statement is correct, would appreciate your opinion on the following question. If it is not correct, then let me know.
The question is:
1) Is it better to always su as mqm and then create/modify mqm objects....but this why you have no record of which member of mqm created mqm objects
|
But eveyone is not added to mqm group. Only those who can create/need mq admin has to be added in mqm group. If there is management systems in place, that a proper record is kept for any new object creation or modification, that will help you to keep track but mq does not keep record (afaik) who has created the objects. But it keep record when was it created or altered.
or
| Quote: |
2) Is is better to create users that are members of no other group but mqm, and then these users modidy/create mqm objects
|
User has to be in mqm group regardless whether they are in other group or not.
Thanks
Last edited by jeevan on Thu Aug 09, 2007 9:09 am; edited 1 time in total |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Aug 09, 2007 9:07 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Your statement is false.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| jeevan |
| Posted: Thu Aug 09, 2007 9:08 am Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
|
| Back to top |
|
|
| jefflowrey |
| Posted: Thu Aug 09, 2007 9:09 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
Sorry, not yours Jeevan.
Rparti's -
| Quote: |
| If user1 creates mqm objects then any user that is part of aixsecurity will also get rights to modify the mqm objects created by user1. (assuming that other members of aixsecurity are not in mqm group) |
It doesn't work that way.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| jeevan |
| Posted: Thu Aug 09, 2007 9:11 am Post subject: |
|
|
Grand Master
Joined: 12 Nov 2005
Posts: 1432
|
| Oh, yes. user in any other group rather than mqm does not have right to modify mq objects. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
