| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| mqsicreateaclentry for Deploys / View only |
« View previous topic :: View next topic » |
| Author |
Message
|
| PeterPotkay |
 Posted: Tue Sep 18, 2007 4:16 pm Post subject: mqsicreateaclentry for Deploys / View only |
 |
|
Poobah
Joined: 15 May 2001
Posts: 7723
|
ACL Permissions
This link shows I can grant "Deploy" for a Broker, and the description says "Deploy Broker Configuration". Does that mean a user / group with this ACL permission will be able to deploy to all Execution Groups on that Broker, as well as view? I'm not clear on what exactly "Deploy Broker Configuration" means.
I have 6 users who I want to be able to deploy flows, stop/start flows and veiw anything and everything, but nothing else. I'm going to put all their domain IDs into a new local group called WMBUsers on the Config Manager server.
It looks like if I gave Deploy rights for these users for each Execution Group that would do it, but I have multiple Brokers with multiple Execution Groups. I would prefer not having to run the command over and over for each Execution Group.
Will this:
mqsicreateaclentry -g WMBUsers -a -x D -b MyBrokerName
give them what I want for all EGs on a Broker, or am I misinterpreting what Deploy Broker Configuration means? I will try it but I want to know if I'm granting to much rights?
Or do I have to do this:
mqsicreateaclentry -g WMBUsers -a -x D -e EG1
mqsicreateaclentry -g WMBUsers -a -x D -e EG2
mqsicreateaclentry -g WMBUsers -a -x D -e EG3
mqsicreateaclentry -g WMBUsers -a -x D -e EG4
mqsicreateaclentry -g WMBUsers -a -x D -e EG5
mqsicreateaclentry -g WMBUsers -a -x D -e EG6
mqsicreateaclentry -g WMBUsers -a -x D -e EG7
mqsicreateaclentry -g WMBUsers -a -x D -e EG8
mqsicreateaclentry -g WMBUsers -a -x D -e EG9
_________________
Peter Potkay
Keep Calm and MQ On |
|
| Back to top |
|
 |
| jefflowrey |
| Posted: Tue Sep 18, 2007 5:26 pm Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
I believe that "Deploy Broker Configuration" means "create and delete EGs".
Which means you need to issue the command against each EG individually, rather than against the broker.
Which means you should polish up your shell scripting, such that you can execute a single generic mqsicreateaclentry against every item in a list of EGs - either generated by hand, or parsed out of mqsilist BROKERNAME...
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
