How to manage page, container, portlet permissions

WAS THIS PAGE HELPFUL? Leave Feedback

Overview

A Portal (e.g., GroundWork Monitor), incorporates Pages (e.g., Dashboards, Status, Business, custom pages), which often incorporate Containers, which contain Portlets (e.g., Trouble View, Host Health, Business Service Monitoring, IFrame). The GroundWork Monitor portal is built using Red Hat JBoss Portal Platform 6 which means that you can build additional web pages to customize and extend the portal and manage user access control.

Portal pages, containers, and portlets are managed by a Portal Administrator (e.g., root/root). The option Site Editor located on the toolbar, is used to add and edit these portal elements and is where an Administrator can set access permissions for specific groups of users with specific memberships.

For a user to have access to a page, container, or portlet, the user needs to be assigned a membership allowing specific permissions and be a member of a group assigned to a portal page, container, or portlet. The page, container, or portlet needs to be set to allow the group and membership. It is possible for a user to have permissions to a page but not a container, or a portlet. Follow the steps below to set permissions for a page, container, or portlet.

Steps

1. Log in to GroundWork Monitor as a Portal Administrator (e.g., root/root).
2. Select the page for which you want to edit permissions.
3. Hover over Site Editor and select Edit Page.
4. Editing permissions:
   • Page:
     • To edit Page permissions select the View Page properties from the bottom of the Page Editor box. In the Permission Setting tab, click Add Permission, choose a group from the left and a membership or * (all membership types in the selected group) from the right, click Save.
   • Container
     • To edit Container permissions select the Containers tab on the right, hover over the container title on the left and select the pencil icon. The Access Permission tab determines which group and membership types within the selected group are allowed to access this container, click Add Permission, choose a group from the left and a membership or * (all membership types in the selected group) from the right, click Save.
   • Portlet
     • To edit Portlet permissions select the Applications tab on the right, hover over the portlet title on the left and select the pencil icon. The Access Permission tab determines which group and membership types within the selected group are allowed to access this portlet, click Add Permission, choose a group from the left and a membership or * (all membership types in the selected group) from the right, click Save.
   • Public Access
     • For each of the three elements above, there is a public access option when selecting permissions, if checked this allows everyone to access the page, container, or portlet. This is used to easily allow for all access versus setting each group.
   • Remove a permission
     • For each of the three elements above, to remove an access group and membership setting, click the trashcan icon next to an existing permission, confirm the deletion, and Save and Close.
5. After all edits, you must select the save icon from the Page Editor in the upper right corner for all changes to take effect.

Example scenario

In this example we create the group NOCUsers, and a new membership NOCBusinessServices to allow group members to access only BMS-Admin and BSM-User membership options and access to the Business portal page. By default GWAdmin and GWOperator roles have this access, plus more.

1. Add a new user, (e.g., nocuser). See: ??How to add a new user
2. Add a new group, (e.g., NOCUsers). See: ?How to add a new group
3. Add a new membership, (e.g., NOCBusinessServices) with only BSM-Admin and BSM-User permissions, and Allow access to all Host Groups and Service Groups. See: How to add a new membership
4. Add the new user (e.g., nocuser), with the new membership (e.g., NOCBusinessServices), to the new group (e.g., NOCUsers). See: ?How to add a user to a group
5. Set the Business portal page, portlet, and container permissible to the NOCUsers group (role) and only the NOCBusinessServices membership. See steps in this document.
6. Log in as the new user (e.g., nocuser, the Business portal page should be accessible.