WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Mapping multiple groups to a single security role

    Posted 09/11/21 12:27 AM

    Hello,

    I understand that the correct way to map multiple groups to a security-role is as follows:

    <application-bnd> <security-role name="admin"> <group name="Manager" /> <group name="TeamLead" /> </security-role> <security-role name="user"> <group name="Employee" /> </security-role> </application-bnd>

    as seen on https://openliberty.io/docs/21.0.0.8/authorization.html

    My question is whether the following alternative of having multiple values in a single group tag might also work :

    <application-bnd> <security-role name="admin"> <group name="Manager,TeamLead,ScrumLeader" /> </security-role> <security-role name="user"> <group name="Employee" /> </security-role> </application-bnd>

    Or can the <group> tag only refer to a single group at a time?

    Thanks,

    Aditya H



    #Support
    #SupportMigration
    #WebSphereLiberty


  • 2.  RE: Mapping multiple groups to a single security role
    Best Answer

    Posted 09/22/21 05:31 PM

    Answer from WAS team :

    Yes, both the <user> and <group> tags only take a single entry. The name can be in LDAP format too. Also, optionally, they can each have an access-id field that represents their realm qualified unique name.



    #Support
    #SupportMigration
    #WebSphereLiberty


Related Content