Security settings for Rational® Integration Tester MQ alias queue recording

If security is enabled for the queue manager, you must enable certain authorities in the queue manager for the Rational® Integration Tester MQ alias queue recording to access the Rational® Integration Tester alias queue.

Queue alias recording authorities

To successfully perform alias queue recording, the following MQ authorities must be granted to the following users:
  • Rational® Integration Tester user. The MQ Username as configured in the MQ physical transport within Rational® Integration Tester.
  • Putting application user. The MQ Username used by applications when performing an MQ PUT to the queues being recorded.
Note: Before changing the queue manager authorities, use the dmpmqaut command to back up the existing queue manager authorities.
Table 1. Queue alias recording authorities for the Rational® Integration Tester userThe following permissions are required for the user to successfully perform alias queue recording.
Object Permissions
Queue manager:
  • queue_manager_name
  • connect
  • inquire
  • display
Queue:
  • SYSTEM.ADMIN.COMMAND.QUEUE
  • put
Queue:
  • SYSTEM.DEFAULT.MODEL.QUEUE
  • get
  • display
Queue:
  • SYSTEM.DEFAULT.LOCAL.QUEUE
  • display
Topic:
  • SYSTEM.DEFAULT.TOPIC
  • display
Queue:
  • alias_queue_name
Note: The name of the alias queue that is being recorded.
  • change
  • display
Queue:
  • **
  • create
Note: This queue manager authority is granting the create permission to the Queue @class object, allowing the user the permission to create queues.
Topic:
  • **
  • create
Note: This queue manager authority is granting the create permission to the Topic @class object, allowing the user the permission to create topics.
Queue:
  • alias_queue_target_queue_name
Note: The name of the base queue that the alias currently points at. This name must be reapplied should the name of the base queue change.
  • put
Table 2. Queue alias recording authorities for the Putting application userThe following permissions are required for the Putting applications user to successfully perform alias queue recording.
Object Permissions
Queue manager:
  • queue_manager_name
  • connect
  • inquire
Queue:
  • alias_queue_name
Note: The name of the alias queue that is being recorded.
  • put
Topic:
  • *_GH
  • publish
A sample script SetAliasRecordingAuthorities.bat or SetAliasRecordingAuthorities.sh that configures the required permissions in the queue manager is available inside a scripts folder of a .zip file in the Rational® Test Control Panel installation directory (for example, <Server installation directory>\tools\IBM\WebSphereMQ\dist) in the .zip file named IBMWebSphereMQdist.zip.

The sample scripts containing the distributed WebSphere® MQ API agent .zip file, can be downloaded from Rational® Test Control Panel.