Default access control policies

The default policies shipped with WebSphere Commerce are organized into the following categories:

Role-based policies

The role-based policies for each default role. These policies are also referred to as command-level policies because they define who can execute each command. For a complete listing of these polices, see Role-based policies.

Resource-level policies

The resource-level policies, grouped by business area. These policies define the actions a group of users can perform on specific resources. Under each business area, policies are organized by the type of resource they regulate:

Data resources

Business objects that can be manipulated such as an order or a bid.

DataBean resources

Contain information about business objects. Data beans are used to display object information about a Web page.

For a complete listing of these polices, see Resource-level policies.

During instance creation, WebSphere Commerce loads the default access control policies from the bootstrap file, WCDE_installdir/xml/policies/xml/defaultAccessControlPolicies.xml.

• Role-based policies
  The following are the role-based policies for each default role in WebSphere Commerce:

• Resource-level policies
  The following is a listing of the data resources and data beans used in each business area or component of WebSphere Commerce.