MQCMD_DELETE_AUTH_REC (Delete Authority Record) on Multiplatforms

The Delete Authority Record (MQCMD_DELETE_AUTH_REC) PCF command deletes an authority record. The authorizations associated with the profile no longer apply to IBM® MQ objects with names that match the profile name specified.

Required parameters

ObjectType (MQCFIN)

The type of object for which to delete authorizations (parameter identifier: MQIACF_OBJECT_TYPE).

The value can be any of the following values:

MQOT_AUTH_INFO: Authentication information.
MQOT_CHANNEL: Channel object.
MQOT_CLNTCONN_CHANNEL: Client-connection channel object.
MQOT_COMM_INFO: Communication information object
MQOT_LISTENER: Listener object.
MQOT_NAMELIST: Namelist.
MQOT_PROCESS: Process.
MQOT_Q: Queue, or queues, that match the object name parameter.
MQOT_Q_MGR: Queue manager.
MQOT_REMOTE_Q_MGR_NAME: Remote queue manager.
MQOT_SERVICE: Service object.
MQOT_TOPIC: Topic object.

ProfileName (MQCFST)

Name of the profile to be deleted (parameter identifier: MQCACF_AUTH_PROFILE_NAME).

If you have defined a generic profile then you can specify it here, using wildcard characters to specify a named generic profile to be removed. If you specify an explicit profile name, the object must exist.

The maximum length of the string is MQ_AUTH_PROFILE_NAME_LENGTH.

Optional parameters

GroupNames (MQCFSL)

Group names (parameter identifier: MQCACF_GROUP_ENTITY_NAMES).

The names of groups having a profile deleted. At least one group name or principal name must be specified. An error occurs if neither are specified.

Each member in this list can be a maximum length of MQ_ENTITY_NAME_LENGTH.

PrincipalNames (MQCFSL)

Principal names (parameter identifier: MQCACF_PRINCIPAL_ENTITY_NAMES).

The names of principals having a profile deleted. At least one group name or principal name must be specified. An error occurs if neither are specified.

Each member in this list can be a maximum length of MQ_ENTITY_NAME_LENGTH.

IgnoreState (MQCFST)

Specifies whether the command fails if the object does not exist (parameter identifier MQIACF_IGNORE_STATE). The value can be any of the following values:

MQIS_YES: The command succeeds regardless of whether the authority record exists.; This is the default value for objects of type QUEUE, QMGR, RQMNAME, and TOPIC.
MQIS_NO: The command fails if the authority record does not exist.; This value is not valid for objects of type QUEUE, QMGR, RQMNAME, and TOPIC. This is the default value for all other object types.

Error codes (Delete Authority Record)

This command might return the following error codes in the response format header, in addition to the values shown on page Error codes applicable to all commands.

Reason (MQLONG)

The value can be any of the following values:

MQRC_OBJECT_TYPE_ERROR: Invalid object type.
MQRC_UNKNOWN_ENTITY: Userid not authorized, or unknown.
MQRCCF_ENTITY_NAME_MISSING: Entity name missing.
MQRCCF_OBJECT_TYPE_MISSING: Object type missing.
MQRCCF_PROFILE_NAME_ERROR: Invalid profile name.