Share via

2.2.25 MQSITEACCESSMASK

  • Article

The MQSITEACCESSMASK bitfield enumeration values can be used to set the value of an ACCESS_MASK structure ([MS-DTYP] section 2.4.3), which is used to constrain the permissions for a Site.

 typedef  enum 
 {
   MQSEC_CREATE_FRS = 0x00000001,
   MQSEC_CREATE_BSC = 0x00000002,
   MQSEC_CREATE_MACHINE = 0x00000004,
   MQSEC_SET_SITE_PROPERTIES = 0x00000010,
   MQSEC_GET_SITE_PROPERTIES = 0x00000020,
   MQSEC_DELETE_SITE = 0x00010000,
   MQSEC_GET_SITE_PERMISSIONS = 0x00020000,
   MQSEC_CHANGE_SITE_PERMISSIONS = 0x00040000,
   MQSEC_TAKE_SITE_OWNERSHIP = 0x00080000,
   MQSEC_SITE_GENERIC_READ = (MQSEC_GET_SITE_PROPERTIES    + MQSEC_GET_SITE_PERMISSIONS),
   MQSEC_SITE_GENERIC_WRITE = (MQSEC_GET_SITE_PROPERTIES    + MQSEC_GET_SITE_PERMISSIONS    + MQSEC_CREATE_MACHINE),
   MQSEC_SITE_GENERIC_ALL = (MQSEC_CREATE_FRS    + MQSEC_CREATE_BSC    + MQSEC_CREATE_MACHINE    + MQSEC_SET_SITE_PROPERTIES    + MQSEC_GET_SITE_PROPERTIES    + MQSEC_DELETE_SITE    + MQSEC_GET_SITE_PERMISSIONS    + MQSEC_CHANGE_SITE_PERMISSIONS    + MQSEC_TAKE_SITE_OWNERSHIP)
 } MQSITEACCESSMASK;

MQSEC_CREATE_FRS:  Specifies the permission required by a security principal to add a routing server to the site.

MQSEC_CREATE_BSC:  Specifies the permission required by a security principal to create a Backup Site Controller (BSC) for the site.

MQSEC_CREATE_MACHINE:  Specifies the permission required by a security principal to add a queue manager to the site.

MQSEC_SET_SITE_PROPERTIES:  Specifies the permission required by a security principal to modify properties of the site.

MQSEC_GET_SITE_PROPERTIES:  Specifies the permission required by a security principal to read properties of the site.

MQSEC_DELETE_SITE:  Specifies the permission required by a security principal to delete the site.

MQSEC_GET_SITE_PERMISSIONS:  Specifies the permission required by a security principal to read permissions for the site.

MQSEC_CHANGE_SITE_PERMISSIONS:  Specifies the permission required by a security principal to modify permissions for the site.

MQSEC_TAKE_SITE_OWNERSHIP:  Specifies the permission required by a security principal to modify the owner of the site.

MQSEC_SITE_GENERIC_READ:  Specifies the permission required by a security principal to read the properties and permissions for the site.

MQSEC_SITE_GENERIC_WRITE:  Specifies the permission required by a security principal to read properties, read permissions, and add queue managers to the site.

MQSEC_SITE_GENERIC_ALL:  Specifies the permission required by a security principal to perform all of the operations listed previously.