Chapter 13: Importing, Exporting, and Deploying Portal Objects

Roles and security integration

The roles within the XML export document are the union of all the roles used by all the exported entities (page groups, pages, catalogs, portlets, templates, agents, and applications).

The portal administrator must create the required J2EE roles and verify that those roles are mapped to the underlying roles provided by EAServer and Enterprise Security or the Tomcat security realm. See the Enterprise Security Administration Guide for details.

At the time of import, export, and deploy, Enterprise Security authenticates the Web Studio user to ensure that he or she has the appropriate role to perform the operation. The default role is PortalAdmin, which is specified by the value of the PortalAdministrationRole property in the global.properties.xml configuration file.

Enabling deploy functionality

Enterprise Portal lets you enable the deploy functionality for Web Studio users with the PortalAdmin role, as described in the global.properties.xml portal configuration file:
<Property name="PortalAdministrationRole"
value="PortalAdmin" description="The J2EE role 
required to administer the Portal performing export/import and update operations." menugroup="-1" />
WARNING! This property is designed for a single role and not a list of roles. There is no parsing of the string to look for multiple roles.

To grant a Web Studio user the Portal Admin role, you must be the PSO or have the StudioAdmin role.
Log in to Web Studio and select Administer | Organizations from the left pane.
Select the organization in which the user resides to whom you want to give find and replace access.
Select Users in the Organization Manager menu.
Right-click the user in the detail view and select Edit Roles.
When the Edit User Roles window displays, grant the user the PortalAdmin role, then click OK.

In addition, the system also verifies that the user has the appropriate access permissions—the PortalAdmin role—against the asset EPStudio.Portal to perform the operations. These permissions are EPStudio.Deploy, EPStudio.Import, EPStudio.Export, EPStudio.UpdateCatalog, and EPStudio.UpdatePage. The portal administrator must have the PortalAdmin role to export, import, and deploy portal entities.

Importing Web Studio objects protected by custom J2EE roles

View this book as PDF