Topic
  • 8 replies
  • Latest Post - ‏2014-10-17T14:47:11Z by David Benes
David Benes
David Benes
9 Posts

Pinned topic Access for users in group only to specific collection

‏2013-05-22T11:56:58Z |

Hi,

we have several collections in ICAwES 3.0.0.2 and we need to allow only specific users to access just specific collections.
Application level security is enabled, LDAP configured, I am able to log in, but the requirement is to control which collections I am able to see.

For example, users in group1 should see collection1, users in group2 collection2 and users in group3 both collection1 and collection2.

There is something like that in Administration console in Security with combination of application association and application user privileges. But in the application user privileges if I switch from user to group, the Application ID part of the dialog is hidden, so I'm unable to control the access per group, only per user.

Am I missing something?

 

Thanks
David

  • Caroline_Burgess
    Caroline_Burgess
    6 Posts
    ACCEPTED ANSWER

    Re: Access for users in group only to specific collection

    ‏2014-07-31T18:32:58Z  

    Hi Caroline,

    thank you very much for that information.
    Hope, that the initial positive feedback will last long enough :)

    Best regards
    David

    Hi David,

    Apologies for the long silence.

    I learned today from dev that this was actually added to the v3.5 release.

    I am looking at a v3.5 install, and can confirm that if I switch from user to group in application user privileges, the Application ID part of the dialog is no longer hidden.

    Kind regards,

    Caroline

  • Caroline_Burgess
    Caroline_Burgess
    6 Posts

    Re: Access for users in group only to specific collection

    ‏2013-06-14T20:54:15Z  

    Hi David,

    I have installed ICAwES 3.0.0.2, enabled application security, configured LDAP etc. and I see your point.

    I will contact ICA development and ask if/how this can be done, and get back to you as soon as I can.

     

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

  • Caroline_Burgess
    Caroline_Burgess
    6 Posts

    Re: Access for users in group only to specific collection

    ‏2013-06-18T15:17:23Z  

    Hi David,

    I have installed ICAwES 3.0.0.2, enabled application security, configured LDAP etc. and I see your point.

    I will contact ICA development and ask if/how this can be done, and get back to you as soon as I can.

     

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

    Hi David,

    I have raised your issue with the ICA development team. Unfortunately, controlling access to collections per user group is not supported with ICA out of the box at present.

    Development have suggested that WebSphere Application Server (WAS) allows customers to set up similar capability.

    The procedure is introduced here:

    http://www-01.ibm.com/support/docview.wss?uid=swg21626364

    Let me know if this helps, or if you would like me to log a new feature request to cover this for future ICA releases? (I am not sure from your post if you are using WAS or Jetty).

    Unfortunately, I cannot guarantee a new feature request will be approved. This would be dependent on complexity, demand and priority in comparison to other new feature requests.

     

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

     

     

     

     

  • David Benes
    David Benes
    9 Posts

    Re: Access for users in group only to specific collection

    ‏2013-06-21T15:47:56Z  

    Hi David,

    I have raised your issue with the ICA development team. Unfortunately, controlling access to collections per user group is not supported with ICA out of the box at present.

    Development have suggested that WebSphere Application Server (WAS) allows customers to set up similar capability.

    The procedure is introduced here:

    http://www-01.ibm.com/support/docview.wss?uid=swg21626364

    Let me know if this helps, or if you would like me to log a new feature request to cover this for future ICA releases? (I am not sure from your post if you are using WAS or Jetty).

    Unfortunately, I cannot guarantee a new feature request will be approved. This would be dependent on complexity, demand and priority in comparison to other new feature requests.

     

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

     

     

     

     

    Hi Caroline,

    thank you very much for your response.

    We are using ICA with Jetty. I understand, that it is not currently supported out of the box, but what should be customized to add this support?

    By the way the link is not so helpful even in case of using WAS because it describes how to define just users, not groups.

    Please be so kind and submit that as new feature request.

     

    Best regards
    David

  • Caroline_Burgess
    Caroline_Burgess
    6 Posts

    Re: Access for users in group only to specific collection

    ‏2013-06-27T14:24:55Z  

    Hi Caroline,

    thank you very much for your response.

    We are using ICA with Jetty. I understand, that it is not currently supported out of the box, but what should be customized to add this support?

    By the way the link is not so helpful even in case of using WAS because it describes how to define just users, not groups.

    Please be so kind and submit that as new feature request.

     

    Best regards
    David

    Hi David,

    I will submit a new feature request and will let you know the outcome of this request in due course.

     

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

  • Caroline_Burgess
    Caroline_Burgess
    6 Posts

    Re: Access for users in group only to specific collection

    ‏2013-08-14T19:13:05Z  

    Hi David,

    I will submit a new feature request and will let you know the outcome of this request in due course.

     

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

    Hi David,

    Just to let you know that you have not been forgotten. Initial feedback for this new feature request has been quite positive.

    I will be in touch as soon as I know more.

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

  • David Benes
    David Benes
    9 Posts

    Re: Access for users in group only to specific collection

    ‏2013-08-15T11:57:16Z  

    Hi David,

    Just to let you know that you have not been forgotten. Initial feedback for this new feature request has been quite positive.

    I will be in touch as soon as I know more.

    Regards,

    Caroline Burgess

    IBM Content Analytics QA

    Hi Caroline,

    thank you very much for that information.
    Hope, that the initial positive feedback will last long enough :)

    Best regards
    David

  • Caroline_Burgess
    Caroline_Burgess
    6 Posts

    Re: Access for users in group only to specific collection

    ‏2014-07-31T18:32:58Z  

    Hi Caroline,

    thank you very much for that information.
    Hope, that the initial positive feedback will last long enough :)

    Best regards
    David

    Hi David,

    Apologies for the long silence.

    I learned today from dev that this was actually added to the v3.5 release.

    I am looking at a v3.5 install, and can confirm that if I switch from user to group in application user privileges, the Application ID part of the dialog is no longer hidden.

    Kind regards,

    Caroline

  • David Benes
    David Benes
    5 Posts

    Re: Access for users in group only to specific collection

    ‏2014-10-17T14:47:11Z  

    Hi David,

    Apologies for the long silence.

    I learned today from dev that this was actually added to the v3.5 release.

    I am looking at a v3.5 install, and can confirm that if I switch from user to group in application user privileges, the Application ID part of the dialog is no longer hidden.

    Kind regards,

    Caroline

    Hi Caroline,
    thanks for update and good news.
    Unfortunately we won't upgrade to 3.5 release soon, but it might be one of the key reason to upgrade earlier.

    Best regards
    David