Configuration of security for users with proxy permission

Skip to first unread message

William DiStefano

unread,
Apr 23, 2013, 2:16:18 PM4/23/13
to profi...@googlegroups.com
Has anyone gone through the process of configuring proxy access on a per department basis after doing a Beta data migration? I'm having some difficulty in properly configuring proxy permissions such that they work in Profiles RNS 1.0.3. Unless all three ProxyFor* fields (ProxyForDepartment, ProxyForInstitution, ProxyForDivison) in the DefaultProxy table are set to NULL it seems that users cannot see the 'Edit This Profile' links. I have added an entry in [RDF.Security].[Member] and in [User.Account].[DefaultProxy] for each of the users with the SecurityGroupID=-40, but I must be overlooking something.

William DiStefano

unread,
Apr 23, 2013, 3:10:20 PM4/23/13
to profi...@googlegroups.com
It looks like I have sort of figured out the problem. The field 'HasSpecialEditAccess' should have been set to 1 for SecurityGroupID=-40. However, now it seems like everyone in the DefaultProxy table has "universal" proxy permission even though they have someting in the 'ProxyForDepartment' field.

Weber, Griffin M

unread,
May 1, 2013, 12:04:05 PM5/1/13
to profi...@googlegroups.com
You shouldn't need to do all of that. I think you have mismatched data in the [User.Account].[DefaultProxy] table and the [User.Account].[User] table. In Profiles RNS Beta, there was a one-to-one mapping between a user and a person profile. In Profiles RNS 1.0, these are independent things. A user might own several profiles. For example, a person might manage both a personal profile and a department profile. In Profiles RNS Beta, when a default proxy was setup for department X, that meant she could edit all person profiles at department X. In Profiles RNS 1.0, it means she can edit whatever profiles *users* at department X can edit. So, check that the institution and department names in your [User.Account].[User] table match the names in your [User.Account].[DefaultProxy] table.

Griffin
 
 
 
 

From: profi...@googlegroups.com [profi...@googlegroups.com] On Behalf Of William DiStefano [wdist...@psu.edu]
Sent: Tuesday, April 23, 2013 3:10 PM
To: profi...@googlegroups.com
Subject: [ProfilesRNS] Re: Configuration of security for users with proxy permission

It looks like I have sort of figured out the problem. The field 'HasSpecialEditAccess' should have been set to 1 for SecurityGroupID=-40. However, now it seems like everyone in the DefaultProxy table has "universal" proxy permission even though they have someting in the 'ProxyForDepartment' field.

On Tuesday, April 23, 2013 2:16:18 PM UTC-4, William DiStefano wrote:
Has anyone gone through the process of configuring proxy access on a per department basis after doing a Beta data migration? I'm having some difficulty in properly configuring proxy permissions such that they work in Profiles RNS 1.0.3. Unless all three ProxyFor* fields (ProxyForDepartment, ProxyForInstitution, ProxyForDivison) in the DefaultProxy table are set to NULL it seems that users cannot see the 'Edit This Profile' links. I have added an entry in [RDF.Security].[Member] and in [User.Account].[DefaultProxy] for each of the users with the SecurityGroupID=-40, but I must be overlooking something.

--
You received this message because you are subscribed to the Google Groups "ProfilesRNS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to profilesrns...@googlegroups.com.
To post to this group, send email to profi...@googlegroups.com.
Visit this group at http://groups.google.com/group/profilesrns?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

William DiStefano

unread,
May 13, 2013, 9:59:02 AM5/13/13
to profi...@googlegroups.com
Thank you, this seems to be working now. However, I am having some trouble in activating edit permission for additional data elements (e.g. preferred title). I have tried to change the EditSecurityGroup in both [RDF.Node] and [Ontology.].[ClassProperty] without success. I was able to get some additional elements to display on the profile view page but not on the profile edit page.
Reply all
Reply to author
Forward
0 new messages