IBM Support

How to avoid removing all mappings from a role via Xmlaccess

Question & Answer


Question

How can I remove a user or group mapping from a role on a resource via Xmlaccess without removing ALL mappings for the role? For example, I wish to remove "mygroup2" from the User role on the myPortlet portlet but retain "mygroup1". Currently my Xmlaccess export of this portlet shows: [] []

Answer

Ensure that you use a value of "set" on the update parameter of the role tag rather than "remove", and then use the "remove" value for the actual mapping you wish to remove. An example snippet would be:

<portlet action="update" active="true" name="myPortlet">


 <access-control>
  <role actionset="User" update="set">
   <mapping subjectid="cn=mygroup2,o=Org" subjecttype="USER_GROUP" update="remove"/>
  </role>
 </access-control>
</portlet>

[{"Product":{"code":"SSHRKX","label":"WebSphere Portal"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"XML Access\/Release Builder","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"6.1;6.0","Edition":"Enable;Extend;Server;Express","Line of Business":{"code":"LOB31","label":"WCE Watson Marketing and Commerce"}}]

Document Information

Modified date:
03 December 2021

UID

swg21329208