2.2.23 MQQMACCESSMASK
The MQQMACCESSMASK bitfield enumeration values can be used to set the value of an ACCESS_MASK structure ([MS-DTYP] section 2.4.3), which is used to constrain the permissions for a Queue Manager.
-
typedef enum { MQSEC_DELETE_DEADLETTER_MESSAGE = 0x00000001, MQSEC_PEEK_DEADLETTER_MESSAGE = 0x00000002, MQSEC_CREATE_QUEUE = 0x00000004, MQSEC_SET_MACHINE_PROPERTIES = 0x00000010, MQSEC_GET_MACHINE_PROPERTIES = 0x00000020, MQSEC_DELETE_JOURNAL_QUEUE_MESSAGE = 0x00000040, MQSEC_PEEK_JOURNAL_QUEUE_MESSAGE = 0x00000080, MQSEC_DELETE_MACHINE = 0x00010000, MQSEC_GET_MACHINE_PERMISSIONS = 0x00020000, MQSEC_CHANGE_MACHINE_PERMISSIONS = 0x00040000, MQSEC_TAKE_MACHINE_OWNERSHIP = 0x00080000, MQSEC_RECEIVE_DEADLETTER_MESSAGE = (MQSEC_DELETE_DEADLETTER_MESSAGE + MQSEC_PEEK_DEADLETTER_MESSAGE), MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE = (MQSEC_DELETE_JOURNAL_QUEUE_MESSAGE + MQSEC_PEEK_JOURNAL_QUEUE_MESSAGE), MQSEC_MACHINE_GENERIC_READ = (MQSEC_GET_MACHINE_PROPERTIES + MQSEC_GET_MACHINE_PERMISSIONS + MQSEC_RECEIVE_DEADLETTER_MESSAGE + MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE), MQSEC_MACHINE_GENERIC_WRITE = (MQSEC_GET_MACHINE_PROPERTIES + MQSEC_GET_MACHINE_PERMISSIONS + MQSEC_CREATE_QUEUE), MQSEC_MACHINE_GENERIC_ALL = (MQSEC_RECEIVE_DEADLETTER_MESSAGE + MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE + MQSEC_CREATE_QUEUE + MQSEC_SET_MACHINE_PROPERTIES + MQSEC_GET_MACHINE_PROPERTIES + MQSEC_DELETE_MACHINE + MQSEC_GET_MACHINE_PERMISSIONS + MQSEC_CHANGE_MACHINE_PERMISSIONS + MQSEC_TAKE_MACHINE_OWNERSHIP), MQSEC_MACHINE_WORLD_RIGHTS = (MQSEC_GET_MACHINE_PROPERTIES + MQSEC_GET_MACHINE_PERMISSIONS) } MQQMACCESSMASK;
MQSEC_DELETE_DEADLETTER_MESSAGE: Specifies the permission required by a security principal to delete messages from the system dead-letter queue.
MQSEC_PEEK_DEADLETTER_MESSAGE: Specifies the permission required by a security principal to peek messages from the system dead-letter queue.
MQSEC_CREATE_QUEUE: Specifies the permission required by a security principal to create a new queue.
MQSEC_SET_MACHINE_PROPERTIES: Specifies the permission required by a security principal to change the properties of the queue manager.
MQSEC_GET_MACHINE_PROPERTIES: Specifies the permission required by a security principal to read the properties of the queue manager.
MQSEC_DELETE_JOURNAL_QUEUE_MESSAGE: Specifies the permission required by a security principal to delete a message from the system queue journal.
MQSEC_PEEK_JOURNAL_QUEUE_MESSAGE: Specifies the permission required by a security principal to peek a message from the system queue journal.
MQSEC_DELETE_MACHINE: Specifies the permission required by a security principal to delete the queue manager.
MQSEC_GET_MACHINE_PERMISSIONS: Specifies the permission required by a security principal to get the security descriptor of the queue manager.
MQSEC_CHANGE_MACHINE_PERMISSIONS: Specifies the permission required by a security principal to set or modify the security descriptor of the queue manager.
MQSEC_TAKE_MACHINE_OWNERSHIP: Specifies the permission required by a security principal to change the owner of the queue manager.
MQSEC_RECEIVE_DEADLETTER_MESSAGE: Specifies the permission required by a security principal to destructively read a message from the system dead-letter queue.
MQSEC_RECEIVE_JOURNAL_QUEUE_MESSAGE: Specifies the permission required by a security principal to destructively read a message from the system queue journal.
MQSEC_MACHINE_GENERIC_READ: Specifies the permission required by a security principal to read the queue manager properties, read the queue manager permissions, and destructively read a message from the system dead-letter or system queue journal.
MQSEC_MACHINE_GENERIC_WRITE: Specifies the permission required by a security principal to read the queue manager properties, read the queue manager permissions, and create new queues.
MQSEC_MACHINE_GENERIC_ALL: Specifies the permission required by a security principal to perform all of the operations listed previously.
MQSEC_MACHINE_WORLD_RIGHTS: Specifies the permission required by a security principal to get queue manager properties or permissions.