Setting Permissions for a Queue

By default, everyone has Send permission for a queue, and the Queue administrator (the person who created the queue) has Full Control permission. With Send permission for a queue, users can retrieve the queue's properties and permissions settings and send messages to the queue. In other words, users have Send Message, Get Properties, and Get Permissions permissions.

When granted Receive permission for a queue, users can retrieve the queue's properties and permissions settings and view/receive messages from the queue. In other words, users have Receive Journal, Receive Message, Peek Message, Get Properties, and Get Permissions permissions.

When you use MSMQ Explorer to grant either Receive Message or Receive Journal permissions to a user or group, that user or group also automatically gets the Peek Message permission because the combination of the receive permission without the peek permission is not useful. You can assign the Receive permission without assigning the Peek permission only programmatically.

You can specify Full Control, Receive, Send, or Special Access permissions for all users and groups. You can set the following Special Access permissions for a queue.

Table 5.5

Special Access Permission Use to allow a user or group to...
Receive Journal (Rj) Read journal messages from the queue.
Receive Message (Rq) Read messages from the queue.
Peek Message (P) View messages in the queue and queue journal.
Send Message (Sq) Send a message to the queue.
Set Properties (Sp) Set the queue properties.
Get Properties (Gp) View the queue properties.
Delete Queue (D) Delete the queue.
Get Permissions (Pg) View the queue permissions settings.
Set Permissions (Ps) Change permissions for the queue.
Take Ownership (O) Take ownership of the queue.



© 1997 by Microsoft Corporation. All rights reserved.