The Resource/Role assignment area is located in the lower half of the Authorization page, allowing you to assign an action to selected Roles for selected Resources. You can also export the assignments created in the current instance of the Administration Center, or import assignments you already created with previous release of the Administration Center.
To set privileges to Roles:
Select the Resources and Roles that you want to set assignments in the Resource panel and Role panel respectively.
Click the Show button to show the selected Resources and Roles in the assignment table.
The assignment table can show only five columns of the roles at the most.
Select an action from the Assign default action list that you want to assign to selected Roles for selected Resources. The actions include execute for SOAP services, and GET, POST, PUT, DELETE, HEADER for REST services.
Select the check box as needed to set an assignment to a Role for a Resource. You can also click the Assign all button to set the assignments to all the Roles for all Resources in the table.
To unset an assignment, simply clear the check box for the pair of Resource and Role, or click the Unassign all button to unset the assignments for all pairs.
Once an assignment is set, you can edit it by right-clicking the corresponding check box in the assignment table and click Edit.
The [Resource/Role assignment] dialog box appears allowing you to change permissions.
The corresponding Role and Resource is shown in the Basic tab of the dialog box. The actions available for SOAP and REST services are listed separately. Select or clear the check boxes as needed to change the assignment to the Role. Click Save to validate the change or Cancel to cancel it.
You can not unset all actions to a Role in the [Resource/Role assignment] dialog box. There should be at least one action selected before you can save it.
When you clear a permission check box for a pair of Resource and Role in the assignment table, you remove all actions assigned to the Role, not just the shown default action.
In the Advanced tab of the dialog box, the underlying XACML Permission Policy is shown. You can edit the policy by changing the effect, actions, algorithm and so on. Click the Validate button to validate the policy. Click Reset to go back to the original policy. For more information about XACML used by ESB Authorization, see Talend ESB Infrastructure Services Configuration Guide. Click Save to save your changes or Cancel to cancel it.
You can also export this assignment to an XML file by clicking the Export button. The Web browser will prompt you to open or save the assignment depending on your Web browser configuration. For more information about how to export assignments, see Exporting assignments.
Talend Administration Center allows you to export the assignments you created in the current instance of the Administration Center to XML files. To do so:
Select one or more Resources and Roles, the assignments between which you want to export, and click Export > Resources in the toolbar.
Note that the Export > Resources menu is disabled if no Resource or no Role is selected.
The [Export assignments] window appears. The assignments between all the pairs of the selected Resources and Roles are shown in the window. By default, all the assignments are selected. Clear the assignments that you do not want to export.
Click Export to export the selected assignments. The Web browser will prompt you to open or save the selected assignments depending on your Web browser configuration.
You can import assignments that you have already created with previous release of the Administration Center. To do so:
In the Resource panel, click Import > Assignments in the toolbar.
The [Select a file to upload] wizard appears. Click Browse to browse to the file that you want to import the assignments from. Click Import to import the assignments in the file and close the wizard or click Select to go to the next step. Note that duplicates of existing assignments in this page will not be imported.
The assignments in the file you browse to are listed in the [Import assignments] wizard. Duplicates of existing assignments in this page are not listed.
Select the assignments in the list that you want to import. Click Import to import the selected assignments and close the wizard or Cancel to cancel it.