Security has been enhanced in Fabric Tools by mapping a
user to a specific role.
The following table shows the current role mapping profiles for
Fabric Tools.
J2EE Role |
Business Services Repository |
Subscriber Manager |
Performance Manager |
Governance Manager – Edit/Import/Export |
Governance Manager - View |
Composition Studio |
FabricAdministrator |
X |
X |
X |
X |
X |
X |
FabricBasicUser |
X |
|
|
|
X |
|
FabricStudioUser |
X |
|
|
|
X |
X |
FabricPerformanceUser |
X |
|
X |
|
X |
|
FabricGovernanceAdministrator |
X |
|
|
X |
X |
|
FabricSubscriberManager |
X |
X |
|
|
X |
|
The following list defines each user role and its participation
in Fabric Tools.
- Fabric Administrator (Full Access) - The system administrator trumps
all other roles and can access everything in the system. The default
UTE configuration sets up an admin user with system administrator
access to establishes a secure Foundation Pack installation for collaboration
or production use.
- Fabric Basic User (Read-only Web View only) - This role
provides read-only access to the Business Service Repository and Governance
Manager. It establishes an appropriate permission level for a user
who needs to log on to Fabric Web Tools using a browser.
- Fabric Governance Administrator (Full Access to Governance
Manager and Fabric Basic User) - The Fabric Governance Administrator
role controls all changes made to data stored in the Business Services
Repository, including:
- assigning users to teams
- defining projects and namespaces.
Composition Studio users may create projects
and namespaces in a local environment where they have more control
and have a Governance Administrator import Fabric Content Archives
with this content.
- Fabric Studio User (Composition Studio and Fabric Basic User) -
The Fabric Studio User role offers full access to Composition Studio
to use secure services for replication, change list submission, and
governance status and must be able to freely use the BSR Viewer to
see repository metadata. The Fabric Studio User role also has read-only
access to governance views such as environments, repository, namespaces,
projects, teams, change lists that are necessary for interacting with
the governance model.
- Fabric Subscriber Manager (Subscriber Manager and Fabric Basic
User) - This role enables full access to the Subscriber Manager
to perform all required subscriber management functions.
- Fabric Performance User (Performance Manager and Fabric Basic
User) - This role enables users to view and use fully the Performance
Manager.