03.05.2015 Views

IBM WebSphere V5.0 Security - CGISecurity

IBM WebSphere V5.0 Security - CGISecurity

IBM WebSphere V5.0 Security - CGISecurity

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

For example, integral-jms-authorization.xml can grant read, write permissions<br />

on queues and Pub, Sub and Persist permissions on topics.<br />

2. Edit the item in the XML file to create a list of user<br />

IDs who has administrative access over all queues. Administrative access is<br />

needed to create queues and perform other administrative operations on<br />

queues.<br />

Example 7-6 Queue administrators configuration<br />

<br />

quser01<br />

quser02<br />

<br />

In this example, quser01 and quser02 have administrative rights over all<br />

queues.<br />

3. Edit section to define the default permissions<br />

for all queues. If this section is not defined then security constraints are valid<br />

only for those user IDs we define explicitly. This configuration will be<br />

overridden for a specific queue if a section is created for that<br />

particular queue.<br />

Example 7-7 Queue default permissions<br />

<br />

read<br />

<br />

4. To define access permissions at the queue level, in the XML file create a<br />

node. and define the following elements.<br />

– is the name of the queue.<br />

– defines the default public access permissions. If you don’t specify<br />

security constraints for a particular use, then these public attributes would<br />

apply.<br />

– defines the access permissions for each user ID.<br />

• is the user ID you want to assign specific attributes.<br />

• is an access permission for the associated user ID.<br />

Example 7-8 Queue permissions<br />

<br />

WQ_ITSOQueue<br />

<br />

<br />

<br />

Chapter 7. Securing Enterprise Integration components 163

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!