Business Publisher Access Rights

by Ms. Luise Bashford (2011-08-08) in group ARIS Support

I have created a user group 'Publisher User Group'. It has 'No access (----)' rights to my folder 'Sandbox'.

I have removed all rights from user 'test user' and added him to the group 'Publisher User Group'.

When logging on the business publisher server as user 'test user' I can still see the folder 'Sandbox'. Why?

Do user rights take some time to propogate?

Thanks,

Luise

 

 

Comments

by Mr. Michal Franc (2011-08-08)

and what rights are in "Publisher User Group"?

by Ms. Luise Bashford (2011-08-08)

'Publisher User Group' has no access to the folder in question which is called Sandbox.

by Mr. Michal Franc (2011-08-08)

Try
create new user group and test it,
"Pass on privileges" in Publisher User Group

by Ms. Luise Bashford (2011-08-08)

I did that already.

by Mr. Jens Heylmann (2011-08-08)

Hi Luise,

try to delete your existing export and create a new one after you change privileges and user group assignments.

 

 

by Ms. Luise Bashford (2011-08-08)

Thanks for the suggestion Jens. I didn't create the original export, the person who created it has left. Can I rename it instead of deleting it, in case I need it back again?

by Ms. Luise Bashford (2011-08-08)

I have created a new publisher export. And updated it.

Now the user that I have been talking about has two options when opening the business publisher URL:

<new export name>.<name of group he is no longer a member of> (our company specific filter)

and

<new export name>.<business publisher user group> (our company specific filter)

When clicking on the business publisher group link he can no longer see the sandbox folder. When clicking on the link of that is named after a group with higher access rights that he is not a member of, he can still see sandbox. Anyone seen this before?

by Mr. Jens Heylmann (2011-08-08)

Hi Luise!

This URLs you talking about are the "access profiles" every user has when he is assigned to more then one webexport, usergroup or company method filter....

Now you have two possibilities:

Go to the ARIS database user management, select the user and his properties. Delete the usergroup <name of group he is no longer a member of> assignment and then delete the web export and create a new one.

Second possibility: Log in to Business Publisher administration GUI (default user is "root" with password "root"). Select "profiles". Search for the profile "<new export name>.<name of group he is no longer a member of> (our company specific filter)" and deactivate it. But be careful, because when you delete the web export this access profile belongs to, your setting is also deleted.

 

 

by Ms. Luise Bashford (2011-08-09)

Hi Jens,

I did not want to delete the group that the user is no longer a member of as there are many other users who are members. Instead I logged into the business publisher URL as root/root and deleted the user in there. Reran the export, which recreated the user in business publisher and HEYHO at last, he only has one profile and only has the rights that I wanted him to have. Success!

Thanks very much for your help.

Luise

by Mr. Francois Du Toit (2011-08-10)

Hi Luise,

If you update settings, usergroup access etc on ARIS, it does not get updated to the Business Publisher automatically. You need to highlight the selected publish from the ARIS side, then you need to select the "Edit" button to update your settings. The Update button only updates the data from the database.

The easiest way to test this would be to create a new publish by entering a new name for the publish and then loggin in to the new publish to see if your test user still have access.

I hope this helps for future changes.

Rgs,

Francois