Posted: Mon Mar 23, 2009 11:20 am Post subject: Z/OS Racf GET/PUT
Newbie
Joined: 23 Mar 2009 Posts: 2
On the Z/OS platform, to secure a queue we use Profiles in RACF
for example:
RDEFINE MQQUEUE QM1.PAY.** UACC(NONE)
PERMIT QM1.PAY.** CLASS(MQQUEUE) ID(MYID) ACCESS(UPDATE)
This will give acces to MYID to PUT or GET a message on the queue PAY
Is there a way to give access only to GET a message on the queue PAY, and preventing to PUT a message
Beside defining an alias with only a GET enable / PUT disable pointing to the PAY queue.
The reason I want to have control from RACF only .
because both operations (put and get) require "update" access to the queue profile there is no chance to differ between put and get by only using racf and a single queue profile (assuming put and get is done by the same userid / group).
it only works the way it is described in the manuals by using alias queues with get / put disable. _________________ Regards, Butcher
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum