| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Authorizations |
« View previous topic :: View next topic » |
| Author |
Message
|
| jcv |
 Posted: Thu Feb 07, 2008 8:59 am Post subject: Authorizations |
 |
|
Chevalier
Joined: 07 May 2007
Posts: 411
Location: Zagreb
|
[moderator]Ref http://www.mqseries.net/phpBB2/viewtopic.php?t=21034[/moderator]
"REFRESH SECURITY" does not affect the result of dmpmqaut. Authorizations which are applicable to classes of objects, not individual objects (that is for crt), are stored in authority records having profile name @class. System administration guide explicitly states for setmqaut that its optional parameter +remove or -remove cannot be used with the option -t qmgr. Hence, once created per some entity and profiles self and @class, records having object type qmgr can be at best revoked (authority set to none), not removed. I think that this applies to @class profile records, also. Otherwise, you should be able to remove the middle record like this:
$ setmqaut -m C004501A.SUN.T -t queue -n @class -g filetran -remove
For me, this does not work. If anyone knows proper way to perform it, I'll be interested to hear it. |
|
| Back to top |
|
 |
| jcv |
| Posted: Thu Feb 07, 2008 9:17 am Post subject: |
|
|
Chevalier
Joined: 07 May 2007
Posts: 411
Location: Zagreb
|
| In fact, "REFRESH SECURITY" maybe does affect the result of dmpmqaut in cases when you remove users or groups. Maybe that is the way to remove those records. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
