Create specific resources

About resources

A privilege is a set of Actions that are authorized on a Resource when some Conditions are met. The InterPlay resources, actions and properties used in the conditions must be published in PassPort before you start creating privileges.

Phase 1 – Installation

During installation, the InterPlay definition file is imported into PassPort. This file contains generic resources that do not depend on your application.

Phase 2 – Customization

Once you have started to configure your application, created Object Types and Editors, you may want to define privileges based on your application data.

Example

You want to authorize:

  • Corrector1 user to only view Collections that have the Source property set to Appli1.
  • Corrector2 user to only access Collections that have the Source property set to Appli2.

The Source property is specific to the type of collection.

Custom resources are created in the following cases:

  • Collection Type: A custom collection type resource is created if you define Authorizable properties on the Collection Type.
  • Object Type: A custom Object Type resource is created if you define Authorizable properties on the Object Type.
  • Collection Editor: A custom Collection Editor resource is created if:
    • You set the Collection Editor as specific in the Collection Editor Selection table.
    • It references a Collection Type that has an authorizable property.
  • Object Editor: A custom Object Editor resource will be created if:
    • You set the Object Editor as specific in the Object Editor Selection table.
    • It references an Object Type type that has an authorizable property.

You must publish your custom resources in PassPort before they become available in the PassPort privilege editor:

  1. Generate the custom PassPort definition file (CSD) via the exportPassportCSD script.
  2. This function generates a resources definition file that creates one resource per Object Type, Collection Type, Collection Editor, and Object Editor. Each resource is associated with properties that you specify as "Authorizable" in the Designer.
    Example: Resource: AccountingDocument, Action: VIEW, Condition: Source='Source1'
    The privilege defined here conditions the access to the collection of accounting documents when source application is "Source1".
  3. Import the CSD file using the PassPort user interface.
  4. InterPlay resources are added to PassPort. Resources that disappear in InterPlay are not removed from the PassPort database since PassPort objects may reference it. You can delete a previously defined InterPlay resource file in PassPort but all dependencies will be lost. You may have for instance to recreate a link between user and InterPlay related roles.

Related Links