IC87817: WMQ EXPLORER V7.1: NON-ADMINISTRATOR USER CANNOT SEE A LOCAL QUEUE MANAGER, EVEN IF SETMQAUT HAS +DSP +CONNECT +INQ SET

WebSphere MQ V7.5 Fix Pack 7.5.0.2
Fix Pack 7.1.0.3 for WebSphere MQ V7.1
WebSphere MQ v7.5.0.2 Hypervisor for RHEL

APAR status

• Closed as program error.

Error description

• Using WebSphere MQ Explorer V7.1 a user who is not a member of
  the MQ Administration group cannot see the desired queue manager
  in the list of local queue managers, even when the corresponding
  setmqaut has the proper authorities and even after
  "Refresh Security" is issued:
  setmqaut -m QmgrName -t qmgr -p UserId +dsp +connect +inq
  
  When using MQ Explorer V7.0 under the same circumstances,
  the user is able to see the queue manager in the list of
  queue managers.
  

Local fix

• In the local queue manager an MQ Administrator can issue the
  following commands to allow the non administrator userid
  to connect to the queue manager:
  .
  setmqaut -m <QMGR name> -t qmgr -p <userid> +connect +inq +dsp
  setmqaut -m <QMGR name> -t q -n SYSTEM.DEFAULT.MODEL.QUEUE
    -p <userid>  +inq +browse +get
  setmqaut -m <QMGR name> -t q -n SYSTEM.MQEXPLORER.REPLY.MODEL
    -p <userid> +inq +browse +get +put
  .
  Then the non-administrator user can add the local queue
  manager as a remote queue manager in the MQ Explorer V7.1.
  

Problem summary

• ****************************************************************
  USERS AFFECTED:
  This issue affects users of WebSphere MQ Explorer V7.1 who
  manage the queue manager using non-MQAdministrator group user.
  
  Platforms affected:
  Linux (x86),Windows
  
  ****************************************************************
  PROBLEM SUMMARY:
  In WebSphere MQ Explorer V7.1 a user who is not a member of
  the MQ Administration group cannot see and manage the desired
  queue manager in the list of local queue managers, even when the
  corresponding setmqaut has the proper authorities, and even
  after "Refresh Security" is issued.
  

Problem conclusion

• The code has been altered to allow a user with the proper
  authority, who is not a member of the MQ Administration group,
  to see and manage the desired queue manager from WebSphere MQ
  Explorer.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
                     v7.1
  Platform           Fix Pack 7.1.0.3
  --------           --------------------
  Windows            7.1.0.3
  Linux (x86)        7.1.0.3
  
  Platform           v7.5
  --------           --------------------
  Multiplatforms     7.5.0.2
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WMQ WINDOWS V7

• Fixed component ID

  5724H7220

Applicable component levels

• R710 PSY

     UP