Restricting Access to Specific Profiles

CentraSite allows you to set permissions on individual profiles within an asset. This feature enables you to specify which of the available profiles can be viewed or edited by users when they display the asset in CentraSite Control. For any given asset, you can define different profile permissions for different users. For example, if an asset includes a profile called Source Control that displays links to your source control systems, you might want to restrict the visibility of that profile to authorized developers.

You define the user-specific or group-specific profile permissions of an asset through the asset's the Permissions profile. For details, see Assigning Permissions Using the User Interface.

The profile permissions that can be set on a given asset for any user or group are:

Permission	Description
View	Enables the specified user or group to the profile when they view the asset.
Modify	Enables the specified user or group to modify the attribute settings in the profile when they view the asset.

The individual profiles do not include the Full permission because users cannot delete a profile from an individual asset.

Important:

Be aware that profile permissions can be used to prevent users from viewing and/or accessing a particular set of attributes through CentraSite's graphical user interfaces. However, they do not restrict access to the attributes themselves at the API level.

Restricting Guest Access to the Summary Tab

By default, if a user with the Guest role has permission to view the details of an asset, CentraSite Control includes the asset's Summary profile in the set of profiles displayed to this user. If you wish to suppress the display of this profile for users with the Guest role, you can do this as follows:

1. On the file system, locate the configuration file plugin.xml in the folder <RuntimeDir>\workspace\webapps\PluggableUI\CentraSiteControl.

If you wish to reactivate the Summary profile for users with the Guest role, replace false by true in the <extension> element and restart Software AG Runtime.