238 Lotus Workplace Web Content Management and Content Manager Working Together
11.1 LWWCM security
Users who need to have access to the LWWCM user interface must be defined in
the
Security & Workflow section of the LWWCM user interface. Users who
browse the Web sites created from LWWCM do not need to access the LWWCM
user interface. Users who only need to browse, not produce or manage the
content published by LWWCM, do not need to be defined in the Security &
Workflow section of the LWWCM user interface.
All objects created in LWWCM have a security setting. In the object definition
window, click the Security tab to get to the setting panel. From this panel, you
can define user or group access and access levels for the LWWCM object. There
are different access levels which can be set to access LWWCM objects. Object
security settings must be defined in the Security tab window of an object while
the workflow security can be defined for workflow and stage objects.
11.1.1 Access levels and security sections
Object security is set in the Security tab of the object definition window. There are
four access levels you can set for an LWWCM object. Figure 11-1 shows the
security panel for an LWWCM object, site.
Figure 11-1 LWWCM object security setting
Chapter 11. Security 239
Four access levels include:
򐂰 Live
This level allows users or groups to view the object in the
Live Web site. If the
object is defined in a workflow, then the object is on the live view state when it
is published.
򐂰 Read
This level allows users or groups to:
View the object in the
Live Web site.
View the object in the LWWCM user interface.
򐂰 Edit
This level allows users or groups to:
View the object in the
Live Web site.
View the object in the LWWCM user interface.
Edit the object in the LWWCM user interface.
򐂰 Delete
This level allows users or groups to:
View the object in the
Live Web site.
View the object in the LWWCM user interface.
Edit the object in LWWCM user interface.
Delete the object in the LWWCM user interface.
Workflow security is defined on the Properties tab window of the workflow stage
objects. You can define different access levels: Live, Read, Edit, Delete , and,
additionally, workflow-specific rights.
򐂰 Approve
This level allows users or groups to:
View the object in the
Live Web site.
View the object in the LWWCM user interface.
Approve an object within a workflow.
Figure 11-2 on page 240 shows sample workflow buttons. Users with proper
approve rights can move objects from one workflow stage to the next.
Tip: If you set users or groups Delete access level to an object, they
automatically get Edit, Read and Live access rights to this object.
240 Lotus Workplace Web Content Management and Content Manager Working Together
Figure 11-2 Workflow buttons
When you create a new object, you automatically have all the access rights to
the object (Live, Read, Edit, and Delete). If the new object has become part of a
workflow, the security setting of the object is applied only to the first workflow
stage. As the object goes through the subsequent workflow stages, the workflow
security of the particular workflow stage will be added to the object security and
dictate the security setting of the object.
On the security setting window of an object, the following security sections are
available:
򐂰 Effective: Specify the effective security for the object. It is the result of the
combined User-Defined or Workflow + System-Defined access levels.
򐂰 User-Defined or Workflow: If the object is not part of a workflow, user
defined access can be set. If the object is part of a workflow, then the security
tab of this object will show the workflow security setting and not the
user-defined setting. The current workflow stage of the object within a
workflow determines the access level for this object.
򐂰 System-Defined: Specify the access level set by the administrators. All
members of the administrators group can edit and set the system defined
security section.
11.1.2 Default users and groups
Before you assign users and groups to different access levels within different
security sections, you must define the users and groups in the Security &

Get IBM Workplace Web Content Management Java Edition V2 and IBM DB2 Content Manager V8 Working Together now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.