Limit Rights to View Queues and channels in MQ Explorer

[Slimer]

Hello everyone, we are running 5.3 here and we have some developers that just want to view message counts in queues. Our IBM rep said it's not possible but I am hoping that they are wrong. We don't want them to be able to change settings just view the objects. Can someone please help with this?

Thanks In Advance,

Tom

 

[kevinf2349]

Why would IBM say it isn't possible I wonder?

You could very easily write a little utility to show queue depths using PCF commands. (Of course this will exclude z/OS platforms for now).

What platform(s) are we talking about?

 

[Slimer]

I'm not sure why. We are running this on Solaris. They want to monitor from a Windows workstation.

 

[kevinf2349]

AHa I think I know why IBM are saying that now. You want it from MQ Explore. That is an all or nothing deal.

However, the fact remains that you could always roll your own utility and build in security.

The main problem will be that you will have to provide a client channel and that may open up a can of worms if you don't authenticate who is connecting in. I am not sure if you can find out what program is using the channel but that would eb one way of doing it. The probelm is that once you grant access to the command queue (to inquire about the queue depth) there is little you can do (out of the box) about the commands they issue.

 

[Slimer]

Thanks for the response. Is there a different utility people use for this? I would assume what we are trying to do is nothing new. Are there other utilities tht I should be looking at for this?

Thanks again,

Tom