Managing the Access Control List 

Use

The Access Control List (ACL) defines the permissions to particular principals to execute particular business object operations.

Prerequisites

In the Authorization Assignment tool of the CAF runtime, you have chosen a business object and a business rule.

You have opened the Access Control List tab page.

Procedure

Adding a Principal

...

       1.      Select the principal you want to add.

You can do this in one of the following ways:

¡        By searching

                                                  i.       In the Principal Name field, enter a name.

You can also use asterisk (*). For example, by entering *ministr*, the Administrator entry is found.

                                                ii.       Choose  with the quick info text Check Entries.

                                               iii.       Select the principal from the results table.

                                               iv.       Choose OK.

○       By browsing

...

                                                  i.       Choose  with the quick info text Browse Users.

                                                ii.       Enter a filter string for the principals.

To see all principals, enter an asterisk (*).

                                               iii.       To see results only for a particular principal type, select it from the Principal dropdown box.

                                               iv.       Choose Search.

                                                 v.       Browse until you find the principal you want to add and select it.

You can sort the principals by type or by name.

To do this, choose the top of the relevant column.

                                               vi.       Choose OK.

       2.      Choose Add Selected to ACL

A new entry is added to the ACL.

Setting Principal Permissions

...

       1.      From the ACL, choose the entry you want to modify.

       2.      From the Permission column, select the permission you want to set.

To add several permissions to one principal, add two entries with the same principal to the ACL and then assign different permissions to each of them.

You can assign the following permissions:

Permissions	Descriptions
fullcontrol	Full access rights (create, read, update, delete)
read	Access rights only for reading
update	Access rights for reading and updating
create	Access rights for creating a new instance
delete	Access rights for reading and removing an existing instance

       3.      Choose Save Business Rules to confirm the changes made.

Removing a Principal

...

...

       1.      From the Access Control List, choose the entry you want to delete.

       2.      Choose  with the quick info text Remove.

The principal and permission are removed from the list.

       3.      Choose Save Business Rules to confirm the changes made.