Here is the default IMPERSONATE permission for 3.2 https://source.jasig.org/uPortal/branches/rel-3-2-patches/uportal-impl/src/main/resources/properties/db/entities/permission_set/Portal_Administrators__IMPERSONATE__system.permission_set
For your case you would need a new permission_set file where you specify either zero or more <group> or <literal> tags in the principal section (who you are granting to) and then one or more <literal> tags in the target section listing the fragment owners that you want the user(s) to be able to swap to. As you can see from that example the literal values are treated as regular expressions.
-Eric On 8/24/11 6:22 PM, Steve Swinsburg wrote:
Hi Jen, That's exactly it, delegated admin of fragments. So for a real example, we want to allow two people in the College of Science to have permission to modify the 'science' layout. Then in the Medical School, five people should be allowed to modify the 'medicine' layout (Joanne. However, each of these groups should only see and be able to modify what they are allowed to do. The IMPERSONATE permission sounds like what we need, are there some docs on that? How can I give these permissions? (Preferably via a CRN as we have automated builds) cheers, Steve On 25/08/2011, at 12:24 AM, Jen Bourey wrote:Hi Steve, Typically each layout fragment has a unique user associated with it, and typically that user is specific to that fragment rather than a "real" user. "Real" users inherit the fragment, and the changes that each user makes to their inherited version aren't shared between users. I'm not sure exactly what functionality you're looking for - my guess is that maybe you're looking for some delegated administration features whereby certain administrators could be permissioned to administer some subset of the fragments, or maybe just a single one? If that's what you're looking for, you should be able to accomplish that by assigning the IMPERSONATE permission. As an example, if you wanted Fred to be able to modify the content and permissions of the Welcome fragment, you could grant the IMPERSONATE permission to Fred on the welcome-lo user. That permission would allow Fred to impersonate the welcome-lo user through the fragment administration portlet, then make layout changes. I believe that that should work, though some of our delegated administration features have yet to receive a lot of real-world testing. If you encounter any issues, definitely let us know so we can fix it :) If I've misinterpreted what functionality you're hoping for, let me know. - Jen On Aug 23, 2011, at 6:16 PM, Steve Swinsburg wrote:Hi all, is it possible to have individual fragments owned by different people? Say I want Fred to be the fragment owner for the Students layout and Sally to be the fragment owner for the Staff layout. Is that possible in the default setup? Looking through the code all I see is Fragment Owners where Fred and Sally would be together and could modify each other's layout. thanks, Steve -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev-- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev
smime.p7s
Description: S/MIME Cryptographic Signature
