Queue access authorisation problems after installation of PTF UK90261

WBI-FN Base PTF UK90261 provides support for WMQ 7.1 (when used with Message Broker 7.0).

When MQ security is enabled for the WBI-FN queues (either using RACF or other methods), the access authorisation for the queues used by the CIN are no longer sufficient.
All queues, which are used by the CIN currently need ALTER authorisations.
However, the related *.def files (sample scripts to set RACF authorisations for the WBI-FN queues) have not been adjusted, nor is the change mentioned in the PTF readme.

• DNIvQPFX.DNF_L_IMP (RMA- and ASP import input queue)
• DNIvQPFX.DNF_L_TR (RMA Transfer input queue)
• DNIvQPFX.DNF_O_FT (MSIF input queue)
• DNIvQPFX.DNF_O_FTTMH (MSIF input queue)
• DNIvQPFX.DNF_O_FTTML (MSIF input queue)
• DNIvQPFX.DNF_O_FTUMH (MSIF input queue)
• DNIvQPFX.DNQ_P_PRT (Message Management Printing input queue)
• DNIvQPFX.DNI_SYSOP
• DNIvINST.SYSOU.DNI_R_EVENT
• DNIvINST.DNFSYSOU.DNF_BACKOUT
• DNIvQPFX.DNF_L_IMP.CTRL
• DNIvQPFX.DNF_L_TRCMD
• DNIvQPFX.DNF_L_TRERR
• DNIvQPFX.DNF_O_FTRST
• DNIvQPFX.DNF_O_FTERR
• DNIvQPFX.DNQ_P_RST

As a consequence, RMA, MSIF, RM import and ASP import as well as MER printing don't work any more as soon as the post installation actions for PTF UK90261 are completed.

To work around the problem, you may decide to change the access authorisations for the above mentioned queues to ALTER rights.
If this is not possible, please wait with installation of PTF UK90261, until a fix for Base APAR PM80558 (and related MSIF and MM PTFs) is available.

The PTFs will provide the following:

1. changed *.def files to change access authorisations for the CIN input queues to ALTER.
2. changed CIN to use MQOpen options for the non-input queues, where UPDATE authorisation is sufficient.

We'll provide an update as soon as the PTFs are available.