| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQJExplorer - permissions needed for read only mode |
« View previous topic :: View next topic » |
| Author |
Message
|
| Sam Uppu |
 Posted: Thu Oct 27, 2011 8:30 am Post subject: MQJExplorer - permissions needed for read only mode |
 |
|
Yatiri
Joined: 11 Nov 2008
Posts: 610
|
Hi,
We upgraded to MQ to v7. There are some apps which were using MQJExplorer to look at their queues etc and they still want to use that MQJExplorer further though it is out of support. If we want to use MQJExplorer in readonly mode what permissions need to be provided to what queues?.
We created a TEST.SVRCONN channel and provided the generic id, app1 in the MCAUSER of the SVRCONN channels.
I am using below script to restrict the apps to use MQJExplorer in read only mode based on the link: http://hursleyonwmq.wordpress.com/2007/02/08/using-websphere-mq-explorer-as-a-read-only-viewer/
| Code: |
#!/bin/ksh
QMgr=QM1
group=group1
##################### MQ Explorer read only permissions ###############################
#
/opt/mqm/bin/setmqaut -m ${QMgr} -t qmgr -g ${group} -all+connect +inq +dsp
#
/opt/mqm/bin/setmqaut -m ${QMgr} -t q -n SYSTEM.DEFAULT.MODEL.QUEUE -g ${group} –all +browse +inq +get
#
/opt/mqm/bin/setmqaut -m ${QMgr} -t q -n SYSTEM.ADMIN.COMMAND.QUEUE -g ${group} –all +get +browse +inq +put
#
/opt/mqm/bin/setmqaut -m ${QMgr} -t q -n SYSTEM.MQEXPLORER.REPLY.MODEL -g ${group} –all +inq +browse +get +dsp
#
# to display all the channels
/opt/mqm/bin/setmqaut -m ${QMgr} -t channel -n '**' -g ${group} -all +dsp
#
# system queues – view access
/opt/mqm/bin/setmqaut -m ${QMgr} -t q -n SYSTEM.** -g ${group} -all +dsp |
Looks to me MQJExplorer is hard coded to use SYSTEM.ADMIN.SVRCONN and doesn't work for any other SVRCONN channels.. correct me here?.
Even if I use SYSTEM.ADMIN.SVRCONN channel and use the generic id, app1 in the SVRCONN channel and provide the above permissions, I am still getting 2035(permission denied) error. Not sure what extra permisisons needed by MQJExplorer. Can you guys advise on this?.
Thanks. |
|
| Back to top |
|
 |
| exerk |
| Posted: Thu Oct 27, 2011 8:33 am Post subject: |
|
|
Jedi Council
Joined: 02 Nov 2006
Posts: 6339
|
You're getting MQRC 2035 on which object, and which group/principal?
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Oct 27, 2011 8:42 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
What, exactly is "WMQJExplorer"?
WebSphere MQ Explorer is the presupplied desktop tool for WebSphere MQ administration. It is built on top of Eclipse and is indeed written in Java.
But it doesn't have a "J" in it's name.
I do not raise this question to be snarky or sarcastic. I raise it so that there is clear communication between the readers of this thread.
MQExplorer is not tied to a specific SVRCONN. It uses the SVRCONN you configure when you configure it's particular connection to a particular queue manager.
This may or may not be true of "WMQJExplorer". |
|
| Back to top |
|
|
| Vitor |
| Posted: Thu Oct 27, 2011 8:45 am Post subject: |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| mqjeff wrote: |
| What, exactly is "WMQJExplorer"? |
IMHO it's Neil Kolban's tool as described here
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Thu Oct 27, 2011 8:58 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Vitor wrote: |
| mqjeff wrote: |
| What, exactly is "WMQJExplorer"? |
IMHO it's Neil Kolban's tool as described here |
Well, yes, I'm *aware* of that tool. However, everything other than the name that Sam has mentioned is tightly directed at WebSphere MQ Explorer.
Again, I seek clear information, not speculation.
And if in fact we are discussing Neil's tool... then that's the source of the issue. AFAIK, it's obsolete and not certified to work with modern versions of WMQ or Java... |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
