XI: How to... add authorizations to Repository objects

[MichalKrawczyk]

When working with many developers we may want to restrict the access for some objects
to some of them (either change, or delete for instance)
XI allows us to do it very easily and this is a simple example on how to start using so called "Data Dependent Authorizations".

In the initial situation we have access to all objects and when we click Change button
we can change any object we want (unless the software component version is not checked "Objects are modifiable")



but we'd like to change this and forbid our user to access Message mappings in one software component version.

1. From the Integration builder: Repository let's go to Tools -> User Roles -> New

2. Let's name our role: SampleRestriction

3. Now we'll Exclude access to our Software component version + for all of it's namespaces and exclude access to all Message Mappings from that component.


This picture was changed a little bit so it's easier to see all objects on it.

Obviously we can choose many other Objects if we want



4. Then hit save & activate our role.

5. Now we have to go to the: http://server:port/useradmin to assing the new role to our user

but before that make sure you got
com.sap.aii.util.server.auth.activation property set to true in your ExchangeProfile
- IntegrationBuilder
--- IntegrationBuilder.Repository

6. Click Roles -> search for role XiRep_Samplerestriction

7. Assign users to...



8. Then we can add a user to the new role.



 



9. Now we can see that our user has been added.
We can log on to the XI Repository and when we click the Change button for the Message mapping we'll see:



 

**********************************************************************************

More information about repository authorizations can be found on:

1. User Roles - help.sap.com
http://help.sap.com/saphelp_nw04/helpdata/en/f4/67b340be3dff5fe10000000a155106/content.htm

2. Latest XI configuration guide under:
Users with Data-Dependent Authorizations

**********************************************************************************