MQSeries.net :: View topic

zpat

I want to grant a unix group the ability to stop/start any message flow in a particular execution group, but not to be able to stop/start the execution group itself.

I can't work out if this is possible - anyone know? The documentation appears to say this

------
Start or stop execution groups
inq SYSTEM.BROKER.AUTH
plus set SYSTEM.BROKER.AUTH or SYSTEM.BROKER.AUTH.EG
----------
Start or stop message flows
inq SYSTEM.BROKER.AUTH
plus set SYSTEM.BROKER.AUTH.EG
--------

To me this suggests that if I grant access to start/stop flows in the EG, then they will always be able to start/stop the EG itself?