Defining Security for a Domain

This document covers the following topics:


General Information

Security for business services is applied at the domain level by associating a group with a domain. Access can then be granted or denied at the domain, business service, and/or method level.

To view and change the security settings for the domains, you use the NBS Security view.

Note:
For more information, see Setting Business Service Security Options in the Natural Business Services Administration documentation. This is part of the Natural Business Services documentation, which is available separately.

Showing the NBS Security View

The NBS Security view is not shown by default when you open the NaturalONE perspective.

Start of instruction setTo show the NBS Security view

  1. From the Window menu, choose Show View > Other.

  2. In the resulting Show View dialog box, expand the Software AG NaturalONE node.

  3. Select NBS Security and choose the OK button.

Showing the Security Groups for a Domain

You can display the security groups for domains that are available both locally and on the NBS server. For each group, you can display the business services within a group, and the methods that are defined for a business service.

Start of instruction setTo show the security details for the groups within a domain

  1. In the Project Explorer view or Natural Server view, select a domain.

    Details about the security settings of that domain are shown in the NBS Security view.

    NBS Security view

    By default, the Synchronize icon (Synchronize) is selected in the local toolbar of the NBS Security. When this icon is selected and you select a different domain in the Project Explorer view or Natural Server view, the details for the new domain are shown in the NBS Security view. If the Synchronize icon is not selected and you select a different domain, the details in the view do not change.

    Tip:
    As it may take some time to retrieve security details from the server, you can deselect the Synchronize icon when you do not require these details.

  2. To display the business services within a group, expand the group. Example:

    Business services within a group

  3. To display the methods defined for a business service, expand the business service. Example:

    Methods within a business service

Changing the Settings for a Security Group

You can set the security options described in the table below. You can set them on group level for all items in this group, on service level including all defined methods, or on method level only.

Security Option Description
Grant Allows access to an item.
Revoke Disallows access to an item.
Disable Temporarily revokes access to an item. When the item is reenabled, the previous setting (Grant or Revoke) is restored.

The NBS Security view shows columns for the above security options. When a security option is set for an item, a checkmark is shown in the corresponding column.

If you change the settings for a security group, you have to update the security settings on the server. Otherwise, the server does not know that the settings have been changed.

Start of instruction setTo change the security settings

  • In the NBS Security view, click a cell in the desired column.

    For example, if you have disallowed access to certain methods, this may now look as follows:

    Example: revoke

    Note:
    To save the changed security settings, you have to update them on the server.

Adding Security Groups

You can add security groups, which have previously been defined on the server, to a domain. Keep in mind that new security groups cannot be defined on the client. This can only be done on the server.

Start of instruction setTo add a security group to a domain

  1. In the Project Explorer view or Natural Server view, select the domain to which you want to add a security group.

  2. In the NBS Security view, invoke the context menu and choose Add Group.

    Or:
    Choose the following icon in the local toolbar:

    Add group

    The Security Groups dialog box appears. Example:

    Security groups

  3. Select the group you want to add.

  4. Choose the OK button.

Removing a Security Group

You can remove a security group from a domain.

If you remove a security group, you have to update the security settings on the server. Otherwise, the server does not know that the group has been removed.

Start of instruction setTo remove a security group from a domain

  1. In the NBS Server view, select the group that you want to delete.

  2. Invoke the context menu and choose Delete Group.

    Note:
    You will not be asked whether you really want to remove the group. However, this change will only become effective when you update the security settings on the server.

Updating the Security Settings on the Server

Each time you change the settings for a security group, you have to update them on the server.

Start of instruction setTo update the security settings on the server

  1. In the NBS Server view, select a group, business service or method.

  2. Invoke the context menu and choose Update.

    Or:
    Choose the following icon in the local toolbar:

    Update

    A progress window is briefly shown as the security settings are updated on the server.