Restricting Access to Asset Profiles
CentraSite allows you to set permissions on individual profiles within an asset. This feature enables you to specify which of the available profiles can be viewed or edited by users when they display the asset in CentraSite Control. For any given asset, you can define different profile permissions for different users. For example, if an asset includes a profile called Source Control that displays links to your source control systems, you might want to restrict the visibility of that profile to authorized developers.
You define the user-specific or group-specific profile permissions of an asset through the asset's the Permissions profile.
The profile permissions that can be set on a given asset for any user or group are:
Permission | Description |
View | Enables the specified user or group to the profile when they view the asset. |
Modify | Enables the specified user or group to modify the attribute settings in the profile when they view the asset. |
The individual profiles do not include the Full permission because users cannot delete a profile from an individual asset.
Important: Be aware that profile permissions can be used to prevent users from viewing and/or accessing a particular set of attributes through CentraSite's graphical user interfaces. However, they do not restrict access to the attributes themselves at the API level.
By default, if a user with Guest role has permission to view the details of an asset, CentraSite Control includes the asset's Summary profile in the set of profiles displayed to this user. If you wish to suppress the display of this profile for users with Guest role, you can do this as follows:
To suppress display of Summary tab for Guest users
1. Open the configuration file plugin.xml in a rich text editor.
You can find the file in the <RuntimeDir>\workspace\webapps\PluggableUI\CentraSiteControl folder.
2. Locate the <extension> property:
<extension point="com.softwareag.cis.plugin.parameter"
id="guestAllowSummaryProfileVisible" value="true" />
3. Set the value of the extension guestAllowSummaryProfileVisible to false. The default is true.
4. After you save the file, restart Software AG Runtime.
To reactivate the Summary profile for Guest users, replace the extension's value false with true, and then restart Software AG Runtime.