Based on some documentation mqreader
is a read-only administrative user that is a member of the MQWebAdminRO role.
https://www.ibm.com/support/knowledgecenter/SSFKSJ_9.1.0/com.ibm.mq.con.doc/q132130_.htmTherefore I am surprised to see that it is having PUT permission.
dis authrec group('mqreader') OBJTYPE(QUEUE) PROFILE(DEV.**)
83 : dis authrec group('mqreader') OBJTYPE(QUEUE) PROFILE(DEV.**)
AMQ8864I: Display authority record details.
PROFILE(DEV.**) ENTITY(mqreader)
ENTTYPE(GROUP) OBJTYPE(QUEUE)
AUTHLIST(BROWSE,GET,INQ,PUT)
Up to now I was not working with mqreader so I do not think it was me who gave myreader the PUT.
------------------------------
Matthias Jungbauer
------------------------------