2.2.23 MQQMACCESSMASK

The MQQMACCESSMASK bitfield enumeration values can be used to set the value of an ACCESS_MASK structure ([MS-DTYP] section 2.4.3), which is used to constrain the permissions for a Queue Manager.

 typedef  enum 
 {
   MQSEC_DELETE_DEADLETTER_MESSAGE = 0x00000001,
   MQSEC_PEEK_DEADLETTER_MESSAGE = 0x00000002,
   MQSEC_CREATE_QUEUE = 0x00000004,
   MQSEC_SET_MACHINE_PROPERTIES = 0x00000010,
   MQSEC_GET_MACHINE_PROPERTIES = 0x00000020,
   MQSEC_DELETE_JOURNAL_QUEUE_MESSAGE = 0x00000040,
   MQSEC_PEEK_JOURNAL_QUEUE_MESSAGE = 0x00000080,
   MQSEC_DELETE_MACHINE = 0x00010000,
   MQSEC_GET_MACHINE_PERMISSIONS = 0x00020000,
   MQSEC_CHANGE_MACHINE_PERMISSIONS = 0x00040000,
   MQSEC_TAKE_MACHINE_OWNERSHIP = 0x00080000,
   MQSEC_RECEIVE_DEADLETTER_MESSAGE = (MQSEC_DELETE_DEADLETTER_MESSAGE    + MQSEC_PEEK_DEADLETTER_MESSAGE),
   MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE = (MQSEC_DELETE_JOURNAL_QUEUE_MESSAGE    + MQSEC_PEEK_JOURNAL_QUEUE_MESSAGE),
   MQSEC_MACHINE_GENERIC_READ = (MQSEC_GET_MACHINE_PROPERTIES    + MQSEC_GET_MACHINE_PERMISSIONS    + MQSEC_RECEIVE_DEADLETTER_MESSAGE    + MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE),
   MQSEC_MACHINE_GENERIC_WRITE = (MQSEC_GET_MACHINE_PROPERTIES    + MQSEC_GET_MACHINE_PERMISSIONS    + MQSEC_CREATE_QUEUE),
   MQSEC_MACHINE_GENERIC_ALL = (MQSEC_RECEIVE_DEADLETTER_MESSAGE    + MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE    + MQSEC_CREATE_QUEUE    + MQSEC_SET_MACHINE_PROPERTIES    + MQSEC_GET_MACHINE_PROPERTIES    + MQSEC_DELETE_MACHINE    + MQSEC_GET_MACHINE_PERMISSIONS    + MQSEC_CHANGE_MACHINE_PERMISSIONS    + MQSEC_TAKE_MACHINE_OWNERSHIP),
   MQSEC_MACHINE_WORLD_RIGHTS = (MQSEC_GET_MACHINE_PROPERTIES    + MQSEC_GET_MACHINE_PERMISSIONS)
 } MQQMACCESSMASK;

MQSEC_DELETE_DEADLETTER_MESSAGE:  Specifies the permission required by a security principal to delete messages from the system dead-letter queue.

MQSEC_PEEK_DEADLETTER_MESSAGE:  Specifies the permission required by a security principal to peek messages from the system dead-letter queue.

MQSEC_CREATE_QUEUE:  Specifies the permission required by a security principal to create a new queue.

MQSEC_SET_MACHINE_PROPERTIES:  Specifies the permission required by a security principal to change the properties of the queue manager.

MQSEC_GET_MACHINE_PROPERTIES:  Specifies the permission required by a security principal to read the properties of the queue manager.

MQSEC_DELETE_JOURNAL_QUEUE_MESSAGE:  Specifies the permission required by a security principal to delete a message from the system queue journal.

MQSEC_PEEK_JOURNAL_QUEUE_MESSAGE:  Specifies the permission required by a security principal to peek a message from the system queue journal.

MQSEC_DELETE_MACHINE:  Specifies the permission required by a security principal to delete the queue manager.

MQSEC_GET_MACHINE_PERMISSIONS:  Specifies the permission required by a security principal to get the security descriptor of the queue manager.

MQSEC_CHANGE_MACHINE_PERMISSIONS:  Specifies the permission required by a security principal to set or modify the security descriptor of the queue manager.

MQSEC_TAKE_MACHINE_OWNERSHIP:  Specifies the permission required by a security principal to change the owner of the queue manager.

MQSEC_RECEIVE_DEADLETTER_MESSAGE:  Specifies the permission required by a security principal to destructively read a message from the system dead-letter queue.

MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE:  Specifies the permission required by a security principal to destructively read a message from the system queue journal.

MQSEC_MACHINE_GENERIC_READ:  Specifies the permission required by a security principal to read the queue manager properties, read the queue manager permissions, and destructively read a message from the system dead-letter or system queue journal.

MQSEC_MACHINE_GENERIC_WRITE:  Specifies the permission required by a security principal to read the queue manager properties, read the queue manager permissions, and create new queues.

MQSEC_MACHINE_GENERIC_ALL:  Specifies the permission required by a security principal to perform all of the operations listed previously.

MQSEC_MACHINE_WORLD_RIGHTS:  Specifies the permission required by a security principal to get queue manager properties or permissions.