Is it possible for a user with non-admin userid to retrieve list of Destinations (Queues / Topics) that he (Non Administrator) has access to ?
book
Article ID: KB0092590
calendar_today
Updated On:
Products
Versions
TIBCO Enterprise Message Service
-
Not Applicable
-
Description
Resolution: Yes it is possible. To achieve this, you need to create a group that would have the admin view-destination permission, then add all the users to that group.
For example: create group ViewDestinationsGroup grant admin ViewDestinationsGroup view-destination create user test grant queue queue.sample test send add member ViewDestinationsGroup test
Then, when the user "test" is used by the admin tool or API, the only thing you can get is its own acl.
Suppose you connect to the admin with the user "test", you can do:
tcp://localhost:7222> showacl user test Target Permissions for user 'test' Queue=queue.sample send
Using the admin API, you would do: admin = new TibjmsAdmin(serverUrl,username,password); ACLEntry acls[] = admin.getUserACLEntries(username); for (int i=0; i<acls.length; i++) System.out.println(acls[i].toString());
Notice that if you don't want to create the group ViewDestinationsGroup and all all users to that group, you would need to grant the view-destination permission directly to the users you want to give that permission to.
Issue/Introduction
Is it possible for a user with non-admin userid to retrieve list of Destinations (Queues / Topics) that he (Non Administrator) has access to ?