IT44089: DISPLAY CHSTATUS(*) SAVED returned "AMQ8135E: Not authorized" for auto-defined CLUSSDR channel status records

APAR status

• Closed as program error.

Error description

• From MQ 9.2 and later within an MQ Clustered environment, the
  'runmqsc' command to display the Channel Status:
  
    DIS CHS(*) SAVED
  
  returned the error message:
  
    "AMQ8135E: Not authorized"
  
  each time it was processing the status record an Auto-Defined
  CLUSSDR (Cluster Sender) Channel.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users who run the 'runmqsc' command:
  
    DISPLAY CHSTATUS(*) SAVED
  
  on queue managers which have saved channel status records for
  automatically defined CLUSSDR channels.
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  An additional authority check was added to MQ 9.2 to ensure the
  user running the 'runmqsc' command:
  
    DISPLAY CHSTATUS(*) SAVED
  
  had the '+DSP' authority for the channel being displayed with
  the MQSC command.
  
  For automatically defined CLUSSDR channels, no authority records
  for a channel of that name will exist.  Therefore this '+DSP'
  authorization check will always fail for these channels.
  
  The result of this is that the MQSC command would output the
  error message: AMQ8135E: Not authorized.
  

Problem conclusion

• The MQ code has been altered: for auto-defined CLUSSDR channel
  status, the '+DSP' authorization check will now be performed
  against the queue:
  
    SYSTEM.CLUSTER.TRANSMIT.QUEUE
  
  which is present by default on a queue manager.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v9.2 LTS   9.2.0.20
  v9.3 LTS   9.3.0.15
  v9.x CD    9.3.4
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MQ BASE V9.3

• Fixed component ID

  5724H7291

Applicable component levels