| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| Security How to Question.... |
« View previous topic :: View next topic » |
| Author |
Message
|
| lnm |
 Posted: Tue Jul 22, 2003 5:20 am Post subject: Security How to Question.... |
 |
|
Apprentice
Joined: 12 Mar 2002
Posts: 43
Location: Florida
|
| We have a script that does a put/get disable or enable in certain situations. I want to limit the authority to only one queue on certain qmanagers. Is that possible? How would I do that? Any reference to documentation would be helpful! Thanks in advance. |
|
| Back to top |
|
 |
| mqonnet |
| Posted: Tue Jul 22, 2003 5:38 am Post subject: |
|
|
Grand Master
Joined: 18 Feb 2002
Posts: 1114
Location: Boston, Ma, Usa.
|
You could always define a new userid/principal and assign appropriate authorities to that userid on various queue managers using setmqaut for the queue in question.
In your script, you could open the queue with alternate userid. And make sure that this userid is the same as the one you created above.
Now, here, i am assuming that the script is something like a perl script or a program in some language. If it is just a runmqsc script, then this is not the solution. If you give your specifics, then we might give you more specifics than this. If this doesnt already help.
Cheers
Kumar |
|
| Back to top |
|
|
| lnm |
| Posted: Tue Jul 22, 2003 6:21 am Post subject: |
|
|
Apprentice
Joined: 12 Mar 2002
Posts: 43
Location: Florida
|
It essentially polls a status interface on a websphere application every 10 minutes, parses the output to determine whether the application is healthy, and creates a log entry for any unhealthy components. Candle watches this log and will generate alerts for any detected errors. The P2E application wants some additional functionality in that if an error is detected, they want us to put disable the queue so that the unhealthy P2E engine will not consume any more messages (hence all the gyrations on getting an MQ-enabled id). Once it detects the error has been corrected, it will do a put enable on the queue to allow messages back through again.
I want to limit this ability to one queue. Is it possible to do? |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Tue Jul 22, 2003 6:36 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
| lnm wrote: |
| I want to limit this ability to one queue. Is it possible to do? |
Yes. set/dspmqaut provide security granularity down to the queue level. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
