Security checking done by the IMS bridge

Different authorities are used depending on the action being performed.

When the bridge puts or gets a message, the following authorities are used:

    Getting a message from the bridge queue
    No security checks are performed.

    Put an exception, or COA report message
    Uses the authority of the user ID in the UserIdentifier field of the MQMD structure.

    Put a reply message
    Uses the authority of the user ID in the UserIdentifier field of the MQMD structure of the original message

    Put a message to the dead-letter queue
    No security checks are performed.

Note:

  1. If we change the IBM MQ class profiles, we must issue the IBM MQ REFRESH SECURITY(*) command to activate the changes.
  2. If we change the authority of a user, we must issue the MQSC RVERIFY SECURITY command to activate the change.

Parent topic: Security considerations for using IBM MQ with IMS