ExtUserAttribInfo ResultSet Extended User Attributes

Managing Security and User Access 5-67 For further information on variables and enabling the BrowserUrlPath component, see the Oracle Fusion Middleware Idoc Script Reference Guide and the Oracle Fusion Middleware Installation Guide for Oracle Enterprise Content Management Suite.

5.9.3 Extended User Attributes

The ExtendedUserAttributes component enables administrators to add extended security attributes to Oracle Content Server users. The extended security attributes are merged into pre-existing user attributes and enable additional flexibility in managing users. For example, roles and accounts attributes can be added to external LDAP users without needing to perform internal setup. Also, roles and accounts attributes can be added to users for a customized application separately from base user attributes. The ExtendedUserAttributes component is installed enabled by default with the Oracle Content Server system. Services installed for the ExtendedUserAttributes component are described in the Oracle Fusion Middleware Services Reference Guide for Universal Content Management. This section covers the following ExtendedUserAttributes topics: ■ Section 5.9.3.1, ExtUserAttribInfo ResultSet ■ Section 5.9.3.2, Configuration Variable for ExtendedUserAttributes In addition to these resources, there are added queries which can be used to gather data for extended user attributes. The queries can be viewed in the Component Wizard or by looking in the UCM_ORACLE_ HOMEucmidccomponentsExtendedUserAttributesresourcesextendeduserattri butes_query.htm file.

5.9.3.1 ExtUserAttribInfo ResultSet

ExtUserAttribInfo is the ResultSet used by the Oracle Content Server system to handle extended user attributes. It is similar to the UserAttribInfo ResultSet used for handling regular user attributes, with some additional information. This ResultSet has three columns. You can supply one attribute per row or multiple attributes on a single row per application. The following columns are included: ■ dUserName : The user whose attributes are being described. ■ dApplication : The application to which those attributes are linked. ■ AttributeInfo : The attribute information. This is a comma-separated entry consisting of three items: – attribute type : usually either a role or account, depending on if a security group or account is being defined for the user – attribute name : the title of the role or account – attribute privilege : a definition of rights given to the user. Rights are defined according to UNIX conventions: 1: read permission 2: write permission 4: delete permission 8: admin For example, the entry role,contributor,3 gives the user permission to read and write in the contributor security group. 5-68 Oracle Fusion Middleware System Administrators Guide for Oracle Content Server Multiple AttributeInfo entries can be added in a single row, separated by commas. For example, this entry adds two attributes into the AttributeInfo row: role,guest,15,account,\all,15. The following is an example of this ResultSet: ResultSet ExtUserAttribInfo 3 dUserName dApplication AttributeInfo jsmith appl role,contributor,15 jsmith app2 account,abc,15,account,xyz,15 end

5.9.3.2 Configuration Variable for ExtendedUserAttributes