Protecting channel initiator definitions

Only members of the mqm group can manipulate channel initiators.

IBM MQ channel initiators are not IBM MQ objects; access to them is not controlled by the OAM. IBM MQ does not allow users or applications to manipulate these objects, unless their user ID is a member of the mqm group. If we have an application that issues the PCF command StartChannelInitiator, the user ID specified in the message descriptor of the PCF message must be a member of the mqm group on the target queue manager.

A user ID must also be a member of the mqm group on the target machine to issue the equivalent MQSC commands through the Escape PCF command or using runmqsc in indirect mode.