Setting Permissions Permissions: Principles

6.4. Permissions and User Roles

Many systems use user roles in addition to permissions. A user role is usually a set of permissions; it can be predefined in the system or be user-defined. In Oracle Service Registry, the user roles mechanism is implemented by groups. The administrator is allowed to set permissions not only for individual users but also for groups. Instead of restricting the relationship to users and roles, it is possible to create groups, set permissions for them and then add users into these groups. This group mechanism in Oracle Service Registry is nearly the same as user role mechanism and it is used instead of user roles. For more information, see Section 1.3, Group Management .

6.5. ApiManagerPermission Reference

ApiManagerPermission allow user to use operation in a privileged mode. The following tables explain what does it mean for certain APIs and operations. Table 4. Account API org.systinet.uddi.account.AccountApi Description operation action Not used. find_userAccount Allows to get foreign account. get_userAccount Allows to saveupdate any account. Allows to set up non default limits. Allows to skip mail confirmation if it is required. save_userAccount Allows to delete any account. delete_userAccount Not used. enable_userAccount Table 5. Admin Utils API org.systinet.uddi.admin.AdministrationUtilsApi Description operation action Allows to call the deleteTModel operation. ApiUserPermission is not sufficient to call the operation. deleteTModel Allows to call the replaceKey operation. ApiUserPermission is not sufficient to call the operation. replaceKey Allows to call the cleanSubscriptionHistory operation. ApiUserPermission is not sufficient to call the operation. cleanSubscriptionHistory Allows to call the resetDiscoveryURLs operation. ApiUserPermission is not sufficient to call the operation. resetDiscoveryURLs Allows to call the transform_keyedReferences operation. ApiUserPermission is not sufficient to call the operation. transform_keyedReferences Allows to call the rebuild_cache operation. ApiUserPermission is not sufficient to call the operation. rebuild_cache Allows to call the replaceURL operation. ApiUserPermission is not sufficient to call the operation. replaceURL Page 369

6.5. ApiManagerPermission Reference

Table 6. Category API org.systinet.uddi.client.category.v3.CategoryApi Description operation action Allows to call the set_category operation. ApiUserPermission is not sufficient to call the operation. set_category Allows to call the add_category operation. ApiUserPermission is not sufficient to call the operation. add_category Allows to call the move_category operation. ApiUserPermission is not sufficient to call the operation. move_category Allows to call the delete_category operation. ApiUserPermission is not sufficient to call the operation. delete_category Not used. find_category Not used. get_category Not used. get_rootCategory Not used. get_rootPath Table 7. Custody API org.systinet.uddi.client.custody.v3.UDDI_CustodyTransfer_PortType Description operation action Allows to call the get_transferToken operation on foreign entities. get_transferToken Allows to call the discard_transferToken operation on foreign tokens. discard_transferToken Table 8. Group API org.systinet.uddi.group.GroupApi Description operation action Allows to find foreign private groups. find_group Allows to get foreign private groups. get_group Allows to saveupdate foreign groups. save_group Allows to delete foreign groups. delete_group Not used. where_amI Not used. find_user Not used. add_user Not used. remove_user Page 370

6.5. ApiManagerPermission Reference