Define roles within a library

Assign roles to users and groups to define access to a web content libraries and access to different views within the authoring portlet. We must have administrator access to edit web content libraries.

We can assign roles to both a whole library, and the item types within a library using either an additive or subtractive methodology.

With an additive methodology, we apply the "All Authenticated Portal Users" to the "Contributor" role to the entire library. This grants "All Authenticated Portal Users" access to the library and any authoring portlets configured to use the library. We then apply Editor, Manager, or Administrator roles to specific resource types to grant additional access to specified users or groups.

With a subtractive methodology, we apply the Manager or Administrator role to a user or group to the entire library. We then apply Editor, Contributor, or User roles to specific item types and clear the inheritance check box. This reduces the access to different item types for specified users or groups.

IBM recommends that propagation from the web content library is enabled because this simplifies administering library access and because disabling propagation results in access-related errors.

Assign access permissions to a library and library item types

1. Click...
   Administration | Portal Content | Web Content Libraries

2. Set the library access permissions:

   1. Click on the library to edit.

   2. Click on the role to edit.

   3. Click Add and search for any users or groups to assign to a role.

   4. Click OK.

   5. Click Resources to return to the previous view.

   6. Click Done.

3. Set access permissions to the different library item types. This defines the views and actions available from within the authoring portlet:

   1. Click on the library to edit.

   2. Click on the role to edit.

   3. Click Add and search for any users or groups to assign to a role.

   4. Click OK.

   5. Click Resources to return to the previous view.

   6. Click Done.

What to do next

By default, each role's access is automatically inherited down to each item in a library. To prevent a user or group from automatically inheriting access to an item, turn off inheritance on that item.

To disable automatic inheritance, specify the following property in the WCM WCMConfigService service using the WAS administration console:

• Property: default.inherit.permissions.enabled
• Value: false

The permissions set for item types in a library do not automatically give access to individual items. They give access only to specific tasks and views within the authoring portlet.

Restart WebSphere Portal to enable any configuration changes.

Parent Web content library management