This site contains the documentation that is relevant to older WSO2 product versions and offerings.
For the latest WSO2 documentation, visit https://wso2.com/documentation/.

Roles

Owned by Former user (Deleted)
Last updated: Sept 23, 2014 by Former user (Deleted)
1 min read

User roles must be granted with permissions in order to access and do operations on every Governance Registry feature. Following are the combinations of permissions required to access Governance Registry features and do relevant operations. Permissions can be granted to a user role while its being created. 

Extensions 

  1. Add 
    1. All Permission>Admin Permissions>Manage>Extensions>List

  2. List 
    1. All Permission>Admin Permissions>Manage>Extensions>Add

  3. Life Cycles 
    1. All Permission>Admin Permissions>Configure>Governance>Lifecycles

  4. Handler 
    1. All Permission>Admin Permissions>Configure>Repository>handlers
    2. All Permission>Admin Permissions>Manage>Resources>Browse

Main>Resources

  1. Browse 
    1. All Permission>Admin Permissions>Manage>Resources>Browse

  2. Activity search 
    1. All Permission>Admin Permissions>Manage>Search>Activities

  3. Search 
    1. All Permission>Admin Permissions>Manage>Search>Advanced

  4. Reports 
    1. All Permission>Admin Permissions>Manage>Resources>WS-API
    2. All Permission>Admin Permissions>Manage>Resources>Browse

Main>Metadata

In order to Add any artifact the following permissions must be given:

    1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadatta
    2. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>Add
    3. All Permission>Admin Permissions>Manage>Resources>WS-API
    4. All Permission>Admin Permissions>Manage>Resources>Browse

In addition, the following specific permissions must be given for each artifact:

  1. Add API 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>APIs>Add

  2. Add Policy
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Policies>Add

  3. Add Schema 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Schemas>Add
  4. Add Service
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Services>Add

  5. Add URI 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>URIs>Add

  6. Add WSDL   

 

    1. All Permission>Admin Permissions>Manage>Resources>Govern>WSDLs>Add 

In order to List any artifact, the following permissions must be given

  1. All Permission>Admin Permissions>Manage>Resources>Govern>Metadata
  2. All Permission>Admin Permissions>Manage>Resources>Govern>Generic Artifacts>List
  3. All Permission>Admin Permissions>Manage>Resources>WS-API

In addition, the following specific permissions must be given for each artifact:

  1. List API 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>APIs>List

  2. List Policy
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Policies>List

  3. List Schema 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Schemas>List

  4. List Service
    1. All Permission>Admin Permissions>Manage>Resources>Govern>Services>List

  5. List URI 
    1. All Permission>Admin Permissions>Manage>Resources>Govern>URIs>List

  6. List WSDL   
    1. All Permission>Admin Permissions>Manage>Resources>Govern>WSDLs>List

 

You might want to have a look at the default permission mappings in repository/conf/permission-mappings.xml if you are interested in more granular resource access permissions.

 Main>Configure

  1. Notifications 
    1. All Permission>Admin Permissions>Manage>Resources>Browse
    2. All Permission>Admin Permissions>Manage>Resources>Notifications
    3. All Permission>Admin Permissions>Manage>Resources>Community Features 

Associations and Dependencies 

  1. Add Association and Add Dependencies
    1. All Permission>Admin Permissions>Manage>Resources>Associations.
    2. And the particular resource should have WRITE permission provided for the logged in User role. 

Life Cycles

  1. Life Cycles
    1. All Permission>Admin Permissions>Manage>Resources>Community Features
    2. All Permission>Admin Permissions>Manage>Resources>Govern>Lifecycles
    3. All Permission>Admin Permissions>Manage>Resources>Browse
  2.  In order to perform a life cycle operation (Promoted/Demote) on a resource the user should have READ/WRITE permissions to the target environment. 

Community Features 

  1. Add Tags, Add Comments, Add Subscriptions, Add Ratings
    1.  All Permission>Admin Permissions>Manage>Resources>Community Features