Setting queue-based permissions on Linux, UNIX, and Windows systems

For security reasons, it is important that permissions are set correctly. You can use WebSphere® MQ commands to set up and manage your required security levels. Use the setmqaut command to set the required permissions, and the dspmqaut command to check which permissions have been set.

The setmqaut command grants and revokes permissions cumulatively. To avoid retaining unwanted permissions that have been set previously, set them explicitly on each setmqaut command by specifying -all to remove all existing permissions, followed by the permissions that you want to set.

The following command grants execute permission and retains any permissions that were already set:

setmqaut -m test -t queue -n SYSTEM.BROKER.AUTH -g group1 +set

The following command grants execute permission and does not retain any existing permissions:

setmqaut -m test -t queue -n SYSTEM.BROKER.AUTH -g group1 -all +set

You can also set multiple permissions at the same time. For example, the following command removes any existing permissions and then grants execute and write permissions:

setmqaut -m test -t queue -n SYSTEM.BROKER.AUTH -g group1 -all +set +put

Use the dspmqaut command after each setmqaut command, to check that the permissions have been set correctly.

For further information about the commands shown in the following examples, and for details of the parameters, see the WebSphere MQ Version 7.5 product documentation online.