Enabling a Search Term Manager to access the Catalogs tool

In this lesson, you add the Search Term Manager role to existing user groups so that a user with that role can access the Catalogs tool.

About this task

The user group for a tool is associated with policies that provide access to preview the store and load business objects. By adding a role to a user group, the user is granted access to preview the store, and load most business objects that are managed with the tool. When you require extra access for loading some of the business objects in the tool, new policies can be set up for those retrieval services. Or, you can add the new role to the user group associated to an existing access control policy that can view those objects.
The ApplicationMenuItems.xml definition file includes the definitions for all Management Center menu options. To view the file in your development environment, complete the following steps:
  1. Open HCL Commerce Developer.
  2. In the Enterprise Explorer view, expand LOBTools > WebContent > WEB-INF > src > xml > commerce > shell
  3. Open the ApplicationMenuItems.xml file to review its contents.
For the menu option (tool) that you want to access, locate the definition within this file and find the usage attribute. In this lesson, you need to add the Search Term Manager role to the following user groups:
CatalogGroupViewersForOrg
The user group CatalogGroupViewersForOrg is associated with the IBM_ViewCatalogTool usage. This usage allows users to access the Catalogs tool and load most business objects except for attribute dictionary objects. The CatalogGroupViewersForOrg definition resembles the following code in the ApplicationMenuItems.xml file.

  <ApplicationMenuItem actionName="openBusinessObjectEditor" displayName="${shellResources.catalogManagementDisplayName}" 
   id="catalogManagement" package="cmc/shell" toolDefinition="cmc/catalog/CatalogManagement" usage="IBM_ViewCatalogTool"/>
WorkspaceToolUsersForOrg
The user group WorkspaceToolUsersForOrg is associated with the IBM_WorkspaceManagementTool usage and allows users to access the Workspace Management tool. The WorkspaceToolUsersForOrg definition resembles the following code in the ApplicationMenuItems.xml file.

  <ApplicationMenuItem actionName="openBusinessObjectEditor" displayName="${shellResources.workspaceManagementDisplayName}" 
   id="workspaceManagement" package="cmc/shell" toolDefinition="cmc/workspace/WorkspaceManagement" usage="IBM_WorkspaceManagementTool"/>
To add support for allowing users with the Search Term Manager role to manager attribute dictionary objects, you also need to add the user to the following user group.
AttributeDictionaryViewersForOrg
The user group AttributeDictionaryViewersForOrg allows users to load attribute dictionary objects. The AttributeDictionaryViewersForOrg definition is not a tool definition and is instead included within the CatalogAccessControlPolicies.xml access control definition file. The code that defines this user group resembles the following code.

<Action CommandName="GetAttributeDictionary.IBM_Admin_Summary" Name="GetAttributeDictionary.Summary"/>
... 
<ActionGroup Name="Catalog-AttributeDictionary-AttributeDictionaryViewers-AccessProfileActionGroup" OwnerID="RootOrganization">
  ...
  <ActionGroupAction Name="GetAttributeDictionary.Details"/>
  <ActionGroupAction Name="GetAttributeDictionary.Summary"/>
  <ActionGroupAction Name="GetAttributeDictionary.All"/>
  ...
</ActionGroup>
...
<Policy Name="Catalog-AttributeDictionary-AttributeDictionaryViewers-AccessProfilePolicy" OwnerID="RootOrganization" 
 UserGroup="AttributeDictionaryViewersForOrg"
 ActionGroupName="Catalog-AttributeDictionary-AttributeDictionaryViewers-AccessProfileActionGroup"
 ResourceGroupName="AccessProfileResourceGroup"
 PolicyType="groupableTemplate"/>
To view the CatalogAccessControlPolicies.xml file in your development environment, complete the following steps:
  1. In a file manager utility, browse to the WCDE_installdir\xml\policies\xml directory.
  2. Open the CatalogAccessControlPolicies.xml file to review its contents.

Procedure

To add the Search Term Manager role to user groups:
  1. Open the Organization Administration Console.
  2. Select Access Management > Member Groups.
  3. In the View menu, select Access Groups.
  4. Add the role to CatalogGroupViewersForOrg user group.
    1. Under the Name field, locate and click CatalogGroupViewersForOrg. The user group details pages displays.
    2. Click Criteria. The Criteria page displays.
    3. In the Select Organization menu, select Root Organization because the Search Term Manager plays a role on this organization.
    4. In the Select Role menu, select Search Term Manager.
    5. Select the check box beside For organization.
    6. Click Add. The Search Term Manager role is added to the Selected roles and organizations list.
    7. Click OK to save the changes.
  5. Add the role to AttributeDictionaryViewersForOrg user group.
    1. Under the Name field, locate and click AttributeDictionaryViewersForOrg. The user group details page displays.
    2. Repeat steps 4b-4g.
  6. Add the role to WorkspaceToolUsersForOrg user group.
    1. Under the Name field, locate and click WorkspaceToolUsersForOrg. The user group details page displays.
    2. Repeat steps 4b-4g.

Results

You successfully added the Search Term Manager role to the user groups to allow for access to the Catalogs tool. Any user that you create that is assigned the Search Term Manager role has access to view the Catalogs tool. The proceeding lessons teach you how to add write usage to the tool.