IT30004: The misleading message "No matching authority records" is reported when the dmpmqaut command is run with the '-e' switch

APAR status

• Closed as program error.

Error description

• When the dmqmqaut command was executed with the '-e'
  option (to display profiles used to calculate the cumulative
  authority to an object) the command returned the response:
  
  "No matching authority records"
  
  but when dmpmqaut was run without the '-e', a specific MQ
  authority record was displayed with "+none" permission
  along with less specific records.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  Users of MQ who run the command dspmqaut using the '-e' option
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  dspmqaut was executed using the '-e' option to display
  calculated authority.  The command reported the message :
  
  dmpmqaut -m IT30004 -e -g testgrp -t q -n TEST.Q
  "No matching authority records."
  
  The meaning of this message was unclear because there
  were matching records.  There was both a generic profile
  which granted authority to the entity, and a specific profile
  which blocked authority to the entity.
  
  Running the command without the '-e' option shows these
  profiles:
  
  dmpmqaut -m IT30004 -g testgrp -t q -n TEST.Q
  profile:     TEST.Q
  object type: queue
  entity:      testgrp
  entity type: group
  authority:   none
  - - - - - - - -
  profile:     TEST.**
  object type: queue
  entity:      testgrp
  entity type: group
  authority:   put
  
  The command was working as designed in not showing any authority
  to the object because the the '-e' option show only records that
  add
  "cumulative" authority to the object but the message reporting
  "No
  matching authority records" could have been clearer
  

Problem conclusion

• A new message has been introduced to explain this situation more
  clearly:
  
  dmpmqaut -m IT30004 -e -g testgrp -t q -n TEST.Q
  Entity has no authority to object. Run dmpmqaut without '-e' to
  view profiles used in calculation.
  
  The full text of the message is :
  
  Message AMQ7301 :
  Entity has no authority to object. Run dmpmqaut without '-e' to
  view profiles.
  
  Explanation:
  dmpmqaut '-e' only displays those authority profiles which add
  cumulative
  authority for an entity to the specified object. It does not
  show profiles with
  'none' permission (which block authority). Rerun dmpmqaut
  without the '-e'
  option to see all profiles which may be involved in calculating
  authority for
  the object.
  
  ---------------------------------------------------------------
  The fix is targeted for delivery in the following PTFs:
  
  Version    Maintenance Level
  v8.0       8.0.0.14
  v9.0 LTS   9.0.0.9
  v9.1 CD    9.1.5
  v9.1 LTS   9.1.0.5
  
  The latest available maintenance can be obtained from
  'WebSphere MQ Recommended Fixes'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006037
  
  If the maintenance level is not yet available information on
  its planned availability can be found in 'WebSphere MQ
  Planned Maintenance Release Dates'
  http://www-1.ibm.com/support/docview.wss?rs=171&uid=swg27006309
  ---------------------------------------------------------------
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM MQ BASE MP

• Fixed component ID

  5724H7251

Applicable component levels