MQSeries.net :: View topic

mqnomad · Posted: Wed Mar 31, 2010 9:27 pm Post subject:

Looking at an MS03 dump of the OAM authorizations - in order of appearance in the MS03 dump - need to understand how to interpret:

For group mqbrkrs

1. mqbrkrs is granted permissions for several SYSTEM.BROKER.* objects

2. Following line appears:
setmqaut -m QMGRNAME -t qmgr -g mqbrkrs +none

3. There are two setmqauts following #2 for a couple of the objects.

My expectation was that #2 removed all permissions (wether or not this is OK is not the issue - just trying to understand what #2 means)

So then I would expect only the last two objects given authorizations *after* #2 to have permissions - but all objects do, even the ones preceding #2. My understanding is that these perms are cumulative, and that the most inclusive command takes precedence

Does this mean that:

- #2 does not turn off authorizations

- #2 only works for the queue manager object

- the most inclusive permissions prevail in spite of #2

- something else

Thanks in advance -
mqnomad

-