Copying an existing access control list (ACL) to create
a new list can save time as you create your ACLs.
When you find that access control lists that you need
to create share similar properties, you can copy an existing ACL to
create a new one. If you have enabled administrative domains, you
can create similar access control lists and assign each one to a different
domain.
To copy an access control list:
- Expand Authorization in the navigation
pane.
- Click Access Control Lists to display
a list of access control lists in the details pane.
- Right-click an access control list and click Copy. The Copy Access Control List window opens.
- In the Name field, rename the access
control list.
- Optional: Type a description to help you identify
the access control list.
- Optional: In the Scope
ID field, type an integer value that represents a category,
such as a group of users, as defined by a client application. The values for this field are defined and used by client applications
and are not used by IBM® Content Manager.
If you leave this field blank, the client application receives -1
as the value.
- Optional: In the Application field,
type a string, up to 128 characters, that represents a client application
name as defined by that client application. The values
for this field are defined and used by client applications and are
not used by IBM Content Manager. If
you leave this field blank, the client application receives an empty
string as the value.
- To include a user ID or group in the access control list:
- To search by name, type a user or group name in the Find
groups/users list and click the Name radio
button. To search by description, type a user or group description
and click the Description radio button.
- You can search for users, groups, or both by selecting
the Users, Groups, or Both radio
button. You do not need to know the exact name or description. Case
is ignored when searching by name, but respected when searching by
description. For fuzzy searches, use the Starting with, Containing,
and Ending radio buttons to narrow the search.
- Click Find.
- Click Show All if you do not
know which users or groups to find. The system returns all users or
user groups defined in your system.
You can select the users and groups that you want from the list.
Users that are associated with a privilege set that contains the ItemSuperAccess
privilege are not shown. This privilege bypasses access control list
checking.
- Optional: Use the search fields for the Find
groups/users list and the Privilege Sets list
to search for a user or group, or for a privilege set. Type the first
couple of letters of what you are looking for and click Find.
The first result displays. By repeatedly clicking Find,
you can display additional results one at a time.
- Select one user or group and match it to one privilege
set.
- Click Add to include the pair in
the table for ACL rules, where the combinations of users or groups
and privilege sets are listed.
- Continue adding ACL rules to the ACL as needed,
then click OK to save the ACL.