IBM Support

How to avoid removing all mappings from a role via Xmlaccess

Question & Answer


Question

How can I remove a user or group mapping from a role on a resource via Xmlaccess without removing ALL mappings for the role? For example, I wish to remove "mygroup2" from the User role on the myPortlet portlet but retain "mygroup1". Currently my Xmlaccess export of this portlet shows: [] []

Answer

Ensure that you use a value of "set" on the update parameter of the role tag rather than "remove", and then use the "remove" value for the actual mapping you wish to remove. An example snippet would be:

<portlet action="update" active="true" name="myPortlet">


 <access-control>
  <role actionset="User" update="set">
   <mapping subjectid="cn=mygroup2,o=Org" subjecttype="USER_GROUP" update="remove"/>
  </role>
 </access-control>
</portlet>

[{"Product":{"code":"SS8KYD","label":"WebSphere Portal End of Support Products"},"Business Unit":{"code":"BU055","label":"Cognitive Applications"},"Component":"XML Access\/Release Builder","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"6.1;6.0","Edition":"Enable;Extend;Server;Express","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
11 February 2020

UID

swg21329208