Granting authority to pass context

Grant the authority to pass context from a retrieved message to one that is being put, to each group of users with a business need for it.

About this task

To grant the authority to pass context on some queues, use the appropriate commands for your operating system.

On Multiplatforms platforms, you can also use the SET AUTHREC command.

Note: On IBM® MQ Appliance you can use only the SET AUTHREC command.

• For AIX®, Linux®, and Windows systems, issue one of the following commands:
  • To pass identity context only:

    
    setmqaut -m QMgrName -n ObjectProfile -t queue -g GroupName +passid
    

  • To pass all context:

    
    setmqaut -m QMgrName -n ObjectProfile -t queue -g GroupName +passall
    

• For IBM i, issue one of the following commands:
  • To pass identity context only:

    
    GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*Q) USER(GroupName) AUT(*PASSID) MQMNAME(' QMgrName ')
    

  • To pass all context:

    
    GRTMQMAUT OBJ(' ObjectProfile ') OBJTYPE(*Q) USER(GroupName) AUT(*PASSALL) MQMNAME(' QMgrName ')
    

• For z/OS®, issue the following commands to pass identity context or all context:

  
  RDEFINE MQQUEUE QMgrName.ObjectProfile UACC(NONE)
  PERMIT QMgrName.ObjectProfile CLASS(MQQUEUE) ID(GroupName) ACCESS(UPDATE)
  

  The variable names have the following meanings:

  QMgrName

  The name of the queue manager. On z/OS, this value can also be the name of a queue sharing group.

  ObjectProfile

  The name of the object or generic profile for which to change authorizations.

  GroupName

  The name of the group to be granted access.