MQZ_GET_EXPLICIT_AUTHORITY_2 - Get explicit authority (extended)

 


This function is provided by a MQZAS_VERSION_2 authorization service component, and is invoked by the queue manager to retrieve the authority that a named group has to access a specified object (but without the additional authority of the nobody group), or the authority that the primary group of the named principal has to access a specified object.

The function identifier for this function (for  MQZEP ) is MQZID_GET_EXPLICIT_AUTHORITY.

 MQZ_GET_EXPLICIT_AUTHORITY_2  is similar to  MQZ_GET_EXPLICIT_AUTHORITY , but with the EntityName parameter replaced by the EntityData parameter.

 

Syntax


 MQZ_GET_EXPLICIT_AUTHORITY_2  (queue_manager, EntityData, EntityType,
ObjectName, ObjectType, Authority, ComponentData, Continuation, CompCode, Reason)

 

Parameters

The  MQZ_GET_EXPLICIT_AUTHORITY_2  call has the following parameters.

 

queue_manager (MQCHAR48) - input

Queue manager name.

The name of the queue manager calling the component. This name is padded with blanks to the full length of the parameter; the name is not terminated by a null character.

The queue-manager name is passed to the component for information; the authorization service interface does not require the component to make use of it in any defined manner.

 

EntityData (MQZED) - input

Entity data.

Data relating to the entity whose access to the object is to be retrieved. See MQZED - Entity descriptor for details.

 

EntityType (MQLONG) - input

Entity type.

The type of entity specified by EntityData. The following value can be specified:

MQZAET_PRINCIPAL
Principal.

MQZAET_GROUP
Group.

 

ObjectName (MQCHAR48) - input

Object name.

The name of the object for which the entity's authority is to be retrieved. The maximum length of the string is 48 characters; if it is shorter than that it is padded to the right with blanks. The name is not terminated by a null character.

If ObjectType is MQOT_Q_MGR, this name is the same as queue_manager.

 

ObjectType (MQLONG) - input

Object type.

The type of entity specified by ObjectName. It is one of the following:

MQOT_AUTH_INFO
Authentication information.

MQOT_NAMELIST
Namelist.

MQOT_PROCESS
Process definition.

MQOT_Q
Queue.

MQOT_Q_MGR
Queue manager.

 

Authority (MQLONG) - output

Authority of entity.

If the entity has one authority, this field is equal to the appropriate authorization operation (MQZAO_* constant). If it has more than one authority, this field is the bitwise OR of the corresponding MQZAO_* constants.

 

ComponentData (MQBYTE×ComponentDataLength) - input/output

Component data.

This data is kept by the queue manager on behalf of this particular component; any changes made to it by any of the functions provided by this component are preserved, and presented the next time one of this component's functions is called.

The length of this data area is passed by the queue manager in the ComponentDataLength parameter of the  MQZ_INIT_AUTHORITY  call.

 

Continuation (MQLONG) - output

Continuation indicator set by component.

The following values can be specified:

MQZCI_DEFAULT
Continuation dependent on queue manager.

For  MQZ_GET_EXPLICIT_AUTHORITY_2  this has the same effect as MQZCI_CONTINUE.

MQZCI_CONTINUE
Continue with next component.

MQZCI_STOP
Do not continue with next component.

 

CompCode (MQLONG) - output

Completion code.

It is one of the following:

MQCC_OK
Successful completion.

MQCC_FAILED
Call failed.

 

Reason (MQLONG) - output

Reason code qualifying CompCode.

If CompCode is MQCC_OK:

MQRC_NONE
(0, X'000') No reason to report.

If CompCode is MQCC_FAILED:

MQRC_NOT_AUTHORIZED
(2035, X'7F3') Not authorized for access.

MQRC_SERVICE_ERROR
(2289, X'8F1') Unexpected error occurred accessing service.

MQRC_SERVICE_NOT_AVAILABLE
(2285, X'8ED') Underlying service not available.

MQRC_UNKNOWN_ENTITY
(2292, X'8F4') Entity unknown to service.

 

C invocation

MQZ_GET_EXPLICIT_AUTHORITY_2 (queue_manager, &EntityData, EntityType,
                             ObjectName, ObjectType, &Authority,
                             ComponentData, &Continuation,
                             &CompCode, &Reason);

The parameters passed to the service are declared as follows:

MQCHAR48  queue_manager;          /* Queue manager name */
MQZED     EntityData;        /* Entity data */
MQLONG    EntityType;        /* Entity type */
MQCHAR48  ObjectName;        /* Object name */
MQLONG    ObjectType;        /* Object type */
MQLONG    Authority;         /* Authority of entity */
MQBYTE    ComponentData[n];  /* Component data */
MQLONG    Continuation;      /* Continuation indicator set by
                                component */
MQLONG    CompCode;          /* Completion code */
MQLONG    Reason;            /* Reason code qualifying CompCode */