| Author |
Message
|
| mavman |
 Posted: Thu Feb 17, 2011 3:27 am Post subject: Process Definintion - Environment Data |
 |
|
Newbie
Joined: 17 Feb 2011
Posts: 4
|
Hello, Hopefully someone could answer this question.?
We have a local queue setup which applicattions put to. This queue is triggered and the process definition then starts a job. Can I get this process to run under the user id that put the original message on the queue? If I do not enter a user on the Environment data it runs under qmqm. Maybe can I enter a variable here?
If anyone could point me in the right direction of let me know this cannot be done it would be very much appreiciated. |
|
| Back to top |
|
 |
| mqjeff |
| Posted: Thu Feb 17, 2011 6:33 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
You can't find out what the userid is on the original message until you've connected to MQ and read the MQMD on the original message.
How can you then go back in time and start the process that read the original message as a different user?
You likewise can't determine what the userid that put the Trigger message is until after you've read the trigger message.
You could certainly modify the process that is being triggered to launch the "business application" as the user in the MQMD. But nothing presupplied by MQ is going to do that for you. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Thu Feb 17, 2011 7:29 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9470
Location: US: west coast, almost. Otherwise, enroute.
|
| Quote: |
| Can I get this process to run under the user id that put the original message on the queue? |
Yes, indirectly. Grant authority to put to the application queue to only those users/groups that need to run the consuming application.
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| santnmq |
| Posted: Thu Feb 17, 2011 10:06 pm Post subject: |
|
|
Centurion
Joined: 11 Jan 2011
Posts: 125
|
| why do you want to use that perticular user ID to start the process. You can probably give additional authorities to the current user id if that is the issue. |
|
| Back to top |
|
|
| mavman |
| Posted: Fri Feb 18, 2011 2:43 am Post subject: |
|
|
Newbie
Joined: 17 Feb 2011
Posts: 4
|
Thanks for the replys.
I think we will have to do what Jeff has recommended. Write some code to retrieve the MDUID from the Message descriptor. The purpose of the question is that the trigger creates some reports which are all going to user QMQM and customers would like these reports under their own IDs e.g Joe Bloggs who put the original message. |
|
| Back to top |
|
|
| Mr Butcher |
| Posted: Fri Feb 18, 2011 3:41 am Post subject: |
|
|
Padawan
Joined: 23 May 2005
Posts: 1716
|
that means all these users have to be defined in your local security manager for this to make it work. what if users come and go? what if a remote company can send these requests for report too? will you define them all so transactions can run under their userid?
i'd rather change the report creating application to use the username from the mqmd instead of the username the application is running under as it does not seem to be a matter of security here, but because of something that is displayed on the report, or where the created report is routed to.......
_________________
Regards, Butcher |
|
| Back to top |
|
|
| Vitor |
| Posted: Fri Feb 18, 2011 5:13 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Mr Butcher wrote: |
| i'd rather change the report creating application to use the username from the mqmd instead of the username the application is running under as it does not seem to be a matter of security here, but because of something that is displayed on the report, or where the created report is routed to....... |
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
