Security settings for Rational Integration Tester MQ exit resources

If security is enabled for the queue manager, you must enable certain authorities in the queue manager for the Rational® Integration Tester MQ exit resources to access the RIT intercept queue.

Recording authorities

To enable Rational Integration Tester record the required messages in the queue manager, the following permissions must be enabled in the queue manager.

Note: Before changing the queue manager authorities, use the dmpmqaut command to back up the existing queue manager authorities.

Table 1. MQ recording authorities for **RITUserName**. The following permissions are required for the RITUserName user to record the messages in the queue manager.
Object	Permissions
Queue manager	connect inquire display
Namelist: SYSTEM.DEFAULT.NAMELIST	display
Namelist: com.greenhat.intercept*	inquire display delete create change
Queue: SYSTEM.DEFAULT.MODEL.QUEUE	get browse inquire display
Queue: SYSTEM.ADMIN.COMMAND.QUEUE	get browse inquire display put

Table 2. MQ recording authorities for **PuttingApplicationUserName**. The following permissions are required for the PuttingApplicationUserName user to record the messages in the queue manager.
Object	Permissions
Queue manager	connect inquire
Namelist: com.greenhat.intercept*	inquire display
Queue: AMQ.RIT.*	put

A sample script SetExitRecordingAuthorities.bat that configures the required permissions in the queue manager is available in <Rational Integration Tester installation directory>/tools/IBM/MQ/ location.

Sift and Pass through authorities

To enable sift and pass through capability in the queue manager, the following permissions must be enabled in the queue manager.

Note: Before changing the queue manager authorities, use the dmpmqaut command to back up the existing queue manager authorities.

Table 3. Sift and Pass through authorities for **RITUserName**. The following permissions are required for the RITUserName user to enable the sift and pass through option in the queue manager.
Object	Permissions
Queue manager	connect inquire display
Namelist: rit.divert.rules*	change inquire display delete create
Namelist: rit.divertrule.*	inquire display delete create
Queue: SSYSTEM.DURABLE.MODEL.QUEUE	get browse inquire display
Queue: SYSTEM.DEFAULT.MODEL.QUEUE	get browse inquire display
Queue: SYSTEM.ADMIN.COMMAND.QUEUE	get browse inquire display put
Queue: QueueName (queue being accessed by RIT)	put setall

Table 4. Sift and Pass through authorities for **PuttingApplicationUserName**. The following permissions are required for the PuttingApplicationUserName user to enable the sift and pass through option in the queue manager.
Object	Permissions
Queue manager	connect inquire
Namelist: com.greenhat.intercept*	inquire, display
Queue: AMQ.RIT.*	put

A sample script SetSiftAndPassThroughAuthorities.bat that configures the required permissions in the queue manager is available in <Rational Integration Tester installation directory>/tools/IBM/MQ/ location.

Feedback