Assign portal role while editting it

In the ABAP world, while editting a role in transaction PFCG you can also do user assignment. This blog shows a possible way to do the same thing in the portal world.

The attached code can be used to create a portal component. This component is added to a folder in the PCD as an iView, with a name such as “Assign This Role”.

While editting a portal role, right click this iView to add it to the portal role under the top level folder as a delta link. Then select the iView in the role and use the “Preview” button in the role editor to launch the iView in a new window.

Here is an example where the iView “Assign This Role” has been placed under the main role entry. Below this is a folder with the “Entry Point” set, so the iView will not be seen by the end user.

If everything works as expected, a window will appear where you can select a user or group and use the “Assign” button to assign the role to that user or group.

Here is what you might see in the popup window:

Remember to remove the iView from the role before releasing it to the user community!

package com.sap.anz; import java.util.Collections; import java.util.Vector; import com.sap.security.api.IGroup; import com.sap.security.api.IGroupFactory; import com.sap.security.api.IGroupSearchFilter; import com.sap.security.api.IRole; import com.sap.security.api.IRoleFactory; import com.sap.security.api.ISearchAttribute; import com.sap.security.api.ISearchResult; import com.sap.security.api.IUser; import com.sap.security.api.IUserFactory; import com.sap.security.api.IUserMaint; import com.sap.security.api.IUserSearchFilter; import com.sap.security.api.UMFactory; import com.sapportals.htmlb.Button; import com.sapportals.htmlb.DropdownListBox; import com.sapportals.htmlb.Form; import com.sapportals.htmlb.GridLayout; import com.sapportals.htmlb.Group; import com.sapportals.htmlb.InputField; import com.sapportals.htmlb.Label; import com.sapportals.htmlb.MessageBar; import com.sapportals.htmlb.enum.GroupDesign; import com.sapportals.htmlb.enum.MessageType; import com.sapportals.htmlb.event.Event; import com.sapportals.htmlb.page.DynPage; import com.sapportals.htmlb.page.PageException; import com.sapportals.portal.htmlb.page.PageProcessorComponent; import com.sapportals.portal.prt.component.IPortalComponentRequest; import com.sapportals.portal.prt.component.IPortalComponentResponse; public class AssignThisRole extends PageProcessorComponent { public DynPage getPage() { return new AssignThisRoleDynPage(); } public static class AssignThisRoleDynPage extends DynPage { /** * Initialization code executed once per user. */ String roleName = “”; IPortalComponentRequest request; IPortalComponentResponse response; MessageType latestStatus = MessageType.NONE; String latestMessage = “”; public void doInitialization() { response = (IPortalComponentResponse) getResponse(); request = (IPortalComponentRequest) getRequest(); String URL = request.getServletRequest().getRequestURI(); int pos = URL.indexOf(“pcd!3aportal_content”); if (pos >=0) { URL = URL.substring(pos+6); URL = URL.replaceAll(“!2f”,”/”); pos = URL.lastIndexOf(“/”); URL = “pcd:”+URL.substring(0,pos); IRoleFactory roleFact = UMFactory.getRoleFactory(); try { IRole testRole = roleFact.getRoleByUniqueName(URL); roleName = URL; } catch (Exception e) { latestStatus = MessageType.ERROR; latestMessage = “Problem getting role: “+e.getMessage(); } } } /** * Input handling code. In general called the first time with the second page request from the user. */ public void doProcessAfterInput() throws PageException { } /** * Create output. Called once per request. */ public void doProcessBeforeOutput() throws PageException { Form myForm = this.getForm(); // get the form from DynPage Group myGroup = new Group(); myGroup.setWidth(“700”); myGroup.setTitle(“Assign users and groups to role”); myGroup.setDesign(GroupDesign.SAPCOLOR); myForm.addComponent(myGroup); GridLayout gl = new GridLayout(); myGroup.addComponent(gl); int row_grid = 1; int col_grid = 1; InputField role = new InputField(“role”); role.setValue(roleName); role.setWidth(“400”); role.setEnabled(false); Label label = new Label(“label”); label.setText(“Role”); role.setLabel(label); gl.addComponent(row_grid,col_grid, label); gl.addComponent(row_grid,col_grid+1, role); IUserFactory userFact = UMFactory.getUserFactory(); IGroupFactory groupFact = UMFactory.getGroupFactory(); DropdownListBox dlb = new DropdownListBox(“dlb”); ISearchResult userResult = null; ISearchResult groupResult = null; try { IUserSearchFilter userFilt = userFact.getUserSearchFilter(); userFilt.setSearchAttribute( “com.sap.security.core.usermanagement”, “uniquename”, “*”, ISearchAttribute.LIKE_OPERATOR, false); userResult = userFact.searchUsers(userFilt); IGroupSearchFilter groupFilt = groupFact.getGroupSearchFilter(); groupFilt.setSearchAttribute( “com.sap.security.core.usermanagement”, “uniquename”, “*”, ISearchAttribute.LIKE_OPERATOR, false); groupResult = groupFact.searchGroups(groupFilt); } catch (Exception e) {}; Vector users = new Vector(); for (;userResult.hasNext();) { String thisone = userResult.next().toString(); try { IUser thisuser = userFact.getUser(thisone); users.add(thisuser.getName()+” (User)”+thisone); } catch (Exception e) {}; }; for (;groupResult.hasNext();) { String thisone = groupResult.next().toString(); try { IGroup thisgroup = groupFact.getGroup(thisone); users.add(thisgroup.getDisplayName()+” (Group)”+thisone); } catch (Exception e) {}; }; Collections.sort(users); for (int i = 0; i<users.size();i++) { String thisone = users.elementAt(i).toString(); int pos = thisone.indexOf(“)”); dlb.addItem(thisone.substring(pos+1),thisone.substring(0,pos+1)); } label = new Label(“User/group”); row_grid++; gl.addComponent(row_grid,col_grid, label); gl.addComponent(row_grid,col_grid+1, dlb); MessageBar mb = new MessageBar(“mb”); mb.setMessage(latestStatus, latestMessage); row_grid++; gl.addColSpanComponent(row_grid,col_grid, mb,2); row_grid++; Button doit = new Button(“doit”); doit.setText(“Assign”); doit.setOnClick(“press”); gl.addComponent(row_grid,col_grid, doit); // create your GUI here…. } public void onPress(Event evt) { IPortalComponentResponse response = (IPortalComponentResponse) getResponse(); IPortalComponentRequest request = (IPortalComponentRequest) getRequest(); IUserFactory userFact = UMFactory.getUserFactory(); IRoleFactory roleFact = UMFactory.getRoleFactory(); IGroupFactory groupFact = UMFactory.getGroupFactory(); roleName = ((InputField) getComponentByName(“role”)).getValue().toString(); String assign = ((DropdownListBox) getComponentByName(“dlb”)).getSelection().toString(); latestStatus = MessageType.INFO; latestMessage = “Assign ” +roleName+”->”+assign; try { if (assign.startsWith(“U”)) { IUserMaint modUser = userFact.getMutableUser(assign); modUser.addToRole( roleFact .getRoleByUniqueName(roleName) .getUniqueID()); modUser.commit(); modUser.save(); } else { IGroup modGroup = groupFact.getMutableGroup(assign); modGroup.addToRole( roleFact .getRoleByUniqueName(roleName) .getUniqueID()); modGroup.commit(); modGroup.save(); } } catch (Exception e) { latestMessage = “Error “+e.getLocalizedMessage()+” assigning role”; latestStatus = MessageType.ERROR; } } } }

2 Comments

You must be Logged on to comment or reply to a post.

Former Member March 3, 2008 at 3:08 am

This is very interesting and a nice feature. However if I need to add the iview to the role then use it and then remove it would be about the same as doing it the old way….. But its a good direction towards SAP offering an easier solution…

Regards,
Paulo Poinha

like (0)
1. Former Member Post authorMarch 3, 2008 at 3:16 am
  
  Yes, I’d like to see it as a standard feature!
  
  Also, a role such as the following would not need to remove the iView…
  (.. shows indentations)
  
  Rolename (not an entry point)
  .”assign me iView”
  .Top level (set this as the entry point)
  ..Real iView1
  ..Real iView2
  
  etc
  
  like (0)