2035 (07F3) (RC2035): MQRC_NOT_AUTHORIZED

General explanation

Explanation

The user of the application or channel that produced the error, is not authorized to perform the operation attempted:
  • On an MQCONN or MQCONNX call, the user is not authorized to connect to the queue manager.
    • On z/OS®, for CICS® applications, MQRC_CONNECTION_NOT_AUTHORIZED is issued instead.
  • On an MQOPEN or MQPUT1 call, the user is not authorized to open the object for the option(s) specified.
    • On z/OS, if the object being opened is a model queue, this reason also arises if the user is not authorized to create a dynamic queue with the required name.
  • On an MQCLOSE call, the user is not authorized to delete the object, which is a permanent dynamic queue, and the Hobj parameter specified on the MQCLOSE call is not the handle returned by the MQOPEN call that created the queue.
  • On a command, the user is not authorized to issue the command, or to access the object it specifies.

This reason code can also occur in the Feedback field in the message descriptor of a report message; in this case it indicates that the error was encountered by a message channel agent when it attempted to put the message on a remote queue.

Completion Code

MQCC_FAILED

Programmer response

Ensure that the correct queue manager or object was specified, and that appropriate authority exists.

Specific problems generating RC2035

JMSWMQ2013 invalid security authentication

See Invalid security authentication for information your IBM® WebSphere® MQ JMS application fails with security authentication errors

MQRC_NOT_AUTHORIZED on a queue or channel

See MQRC_NOT_AUTHORIZED on a queue for information when MQRC 2035 (MQRC_NOT_AUTHORIZED) is returned where a user is not authorized to perform the function. Determine which object the user cannot access and provide the user access to the object.

MQRC_NOT_AUTHORIZED (AMQ4036 on a client) as an administrator

See MQRC_NOT_AUTHORIZED as an administrator for information when MQRC 2035 (MQRC_NOT_AUTHORIZED) is returned where you try to use a user ID that is a IBM WebSphere MQ Administrator, to remotely access the queue manager through a client connection.

MQS_REPORT_NOAUTH

See MQS_REPORT_NOAUTH for information on using this environment variable to better diagnose return code 2035 (MQRC_NOT_AUTHORIZED). The use of this environment variable generates errors in the queue manager error log, but does not generate a Failure Data Capture (FDC).

MQSAUTHERRORS

See MQSAUTHERRORS for information on using this environment variable to generate FDC files related to return code 2035 (MQRC_NOT_AUTHORIZED). The use of this environment variable generates an FDC, but does not generate errors in the queue manager error log.