If you goal is to have a profile in which ONLY the Service management screen is hidden you should be in luck - as long as you don't intend that person to also be acting as an administrator and require access to the "Admin Tools" area.
What nodes display in the left nav also relies on the type of install you've done, if you've selected simple ticketing or ITIL, etc etc.. I'll assume you want them to have access to all except Admin Tools and Service Management.
You will likely need to either explicitly allow this profile access to all objects EXCEPT "Service" and "LnkServices" or explicitly deny access to "Service" and "LnkServices".
The Service Manager profile has the following group nodes specified:
Your profile will be quite the opposite of the above. To get you started you can generate the necessary customization files at the above mentioned wiki page. Test it out in your dev environment first!
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi, I'm attempting to do something similar.
As far as I understood, it's all about profiles, right? But I didn't understand very good your explanation...
I'd like a given user profile NOT able to see the following menus in the left pane (drawers):
And I'd like the profile to be able to see only this menus:
Helpdesk
Incident Management
So I have to create a new extension, modify the XML file "datamodel.my-custom-menu.xml" and then how can set a menu as visible or as invisible? I still don't get it.
THANKS
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hello,
I found just one way but once you re-install iTop, you have to set again those modifications:for example in:env_production/itop-knownerror-mgmt/model.itop-knownerror-mgmt.php: you have to change:
$comp_menus['ProblemManagement'] = new MenuGroup('ProblemManagement', 42);into $comp_menus['ProblemManagement'] = new MenuGroup('ProblemManagement', 42 'Organization', UR_ACTION_MODIFY, UR_ALLOWED_YES);
I hope this helpciao ciaoLaura
Hi, I'm attempting to do something similar.
As far as I understood, it's all about profiles, right? But I didn't understand very good your explanation...I'd like a given user profile NOT able to see the following menus in the left pane (drawers):Problem Management
Change management
Service Management
Data administration
Admin tools
And I'd like the profile to be able to see only this menus:Helpdesk
Incident Management
So I have to create a new extension, modify the XML file "datamodel.my-custom-menu.xml" and then how can set a menu as visible or as invisible? I still don't get it.THANKSHide modules in left pane for some profileSent from sourceforge.net because you indicated interest in https://sourceforge.net/p/itop/discussion/922360/To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi @Mlaura
I tried your solution, but even with your changes I can still see the Problem Management menu on the left pane. I even tried to comment all the $__comp_menus__ code but I can still see and select this menu.
Thanks anyway!
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi @Mlaura
I tried your solution, but even with your changes I can still see the Problem Management menu on the left pane. I even tried to comment all the $comp_menus code but I can still see and select this menu.
Thanks anyway!Hide modules in left pane for some profileSent from sourceforge.net because you indicated interest in https://sourceforge.net/p/itop/discussion/922360/To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I found this topic because I have problems when creating a profile or midificar. As happened to metafaniel I need a profile that only you can access Helpdesk, Incident Management.
I followed the wiki but when I generate the new profile gives me error
My apologies for resurecting an old post, but I highly doubt I am the only one that still struggles with this. I have my solution documented below. I have NOT figured out how to put this into an extension, if you know how and could post that I would prefer that method over this.
THIS IS MODIFYING THE BASE CODE!! Do all of this in your test environment first!!!
In addition chances are you will need to recreate this whever an udpate is made as it changes the base code. Due to that make sure you create detailed notes of what you did so you can recreate your work if needed.
I have not experimented on the full extent of the impact...so far I know it restricts the SUPPORT AGENT account down to just Welcome and Helpdesk
First you need to identify the items you are presenting in your side bar. Below is the list of items I used and the pats I needed to update
Config management - /datamodels/2.x/itop-config-mgmt/datamodel.itop-config-mgmt.xml
Change Control - /datamodels/2.x/itop-change-mgmt/datamodel.itop-change-mgmt.xml
Service Management - /datamodels/2.x/itop-service-mgmt/datamodel.itop-service-mgmt.xml
IP Management - /extensions/teemip-ip-mgmt/datamodel.teemip-ip-mgmt.xml
Search for the following entry in the code: xsi:type="MenuGroup"
Hi Jason , Thank you this worked with ConfigManagement, this helped me for hiding ConfigManagement menu but for Change and service management menue it gives error "/itop_design/menu[ServiceManagement] at line 0: could not be modified (not found)
did you face same issue?
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Buenas tardes una recomendación que pudo dar para que puedas limitar los menus y que se un control total sobre estos es que tienes que agregar la dependencia de la extension:
Asi ya tendras libertad de modificar los menus
I have a problem when applying the 'Delegate 'Admin tools' menus' documentation.
Paragraph:
WebPageMenuNode need to be secured against direct access (a user may guess the url of a webPage and try to access it even if he do not see the menu). To do so, each web page is checking against ApplicationMenu::CheckMenuIdEnabled(“MenuId”); with MenuIdbeeing the id used in the xml definition of the menu. This ensure that in order to be able to execute a webpage the user must have access to the corresponding menu.
In which it mentions in this paragraph that we can add more security by preventing the profile from being able to access that menu from the link.
However, I don't know how to apply it within the code, so I ask for your collaboration.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi Guys.
I want to Hide service Management,problem and change for some profile, i can modify grant matrix create , modify and delete.
But my goal is to Hide the few module in left pane for some profile.
If any One have Idea .. please suggest me.
Best Regards
If you goal is to have a profile in which ONLY the Service management screen is hidden you should be in luck - as long as you don't intend that person to also be acting as an administrator and require access to the "Admin Tools" area.
What nodes display in the left nav also relies on the type of install you've done, if you've selected simple ticketing or ITIL, etc etc.. I'll assume you want them to have access to all except Admin Tools and Service Management.
If you are looking to create a new profile, you will need to create an extension. There is some excellent documentation here: https://wiki.openitop.org/doku.php?id=customization:add-profile-sample
You will likely need to either explicitly allow this profile access to all objects EXCEPT "Service" and "LnkServices" or explicitly deny access to "Service" and "LnkServices".
The Service Manager profile has the following group nodes specified:
Your profile will be quite the opposite of the above. To get you started you can generate the necessary customization files at the above mentioned wiki page. Test it out in your dev environment first!
Hi, I'm attempting to do something similar.
As far as I understood, it's all about profiles, right? But I didn't understand very good your explanation...
I'd like a given user profile NOT able to see the following menus in the left pane (drawers):
And I'd like the profile to be able to see only this menus:
So I have to create a new extension, modify the XML file "datamodel.my-custom-menu.xml" and then how can set a menu as visible or as invisible? I still don't get it.
THANKS
Hello,
I found just one way but once you re-install iTop, you have to set again those modifications:for example in:env_production/itop-knownerror-mgmt/model.itop-knownerror-mgmt.php: you have to change:
$comp_menus['ProblemManagement'] = new MenuGroup('ProblemManagement', 42);into $comp_menus['ProblemManagement'] = new MenuGroup('ProblemManagement', 42 'Organization', UR_ACTION_MODIFY, UR_ALLOWED_YES);
I hope this helpciao ciaoLaura
Hi, I'm attempting to do something similar.
As far as I understood, it's all about profiles, right? But I didn't understand very good your explanation...I'd like a given user profile NOT able to see the following menus in the left pane (drawers):Problem Management
Change management
Service Management
Data administration
Admin tools
And I'd like the profile to be able to see only this menus:Helpdesk
Incident Management
So I have to create a new extension, modify the XML file "datamodel.my-custom-menu.xml" and then how can set a menu as visible or as invisible? I still don't get it.THANKSHide modules in left pane for some profileSent from sourceforge.net because you indicated interest in https://sourceforge.net/p/itop/discussion/922360/To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
Hi @Mlaura
I tried your solution, but even with your changes I can still see the Problem Management menu on the left pane. I even tried to comment all the
$__comp_menus__code but I can still see and select this menu.Thanks anyway!
Hi,
I found also this solution and seems work, at least for me:<menus>
</menus>
see youciaoLaura
Hi @Mlaura
I tried your solution, but even with your changes I can still see the Problem Management menu on the left pane. I even tried to comment all the $comp_menus code but I can still see and select this menu.
Thanks anyway!Hide modules in left pane for some profileSent from sourceforge.net because you indicated interest in https://sourceforge.net/p/itop/discussion/922360/To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/
Good Morning,
I found this topic because I have problems when creating a profile or midificar. As happened to metafaniel I need a profile that only you can access Helpdesk, Incident Management.
I followed the wiki but when I generate the new profile gives me error
and the same error happens when I try to file proof of the wiki itself. if someone could help me I would be eternally grateful.
My apologies for resurecting an old post, but I highly doubt I am the only one that still struggles with this. I have my solution documented below. I have NOT figured out how to put this into an extension, if you know how and could post that I would prefer that method over this.
THIS IS MODIFYING THE BASE CODE!! Do all of this in your test environment first!!!
In addition chances are you will need to recreate this whever an udpate is made as it changes the base code. Due to that make sure you create detailed notes of what you did so you can recreate your work if needed.
I have not experimented on the full extent of the impact...so far I know it restricts the SUPPORT AGENT account down to just Welcome and Helpdesk
First you need to identify the items you are presenting in your side bar. Below is the list of items I used and the pats I needed to update
Config management - /datamodels/2.x/itop-config-mgmt/datamodel.itop-config-mgmt.xml
Change Control - /datamodels/2.x/itop-change-mgmt/datamodel.itop-change-mgmt.xml
Service Management - /datamodels/2.x/itop-service-mgmt/datamodel.itop-service-mgmt.xml
IP Management - /extensions/teemip-ip-mgmt/datamodel.teemip-ip-mgmt.xml
Search for the following entry in the code: xsi:type="MenuGroup"
Default view
Add the following lines
Updated View
Save work
use the toolkit to validate Data Model
use the toolkit to Update the ITop code
Last edit: Jason Woodward 2016-08-26
Hi Jason , Thank you this worked with ConfigManagement, this helped me for hiding ConfigManagement menu but for Change and service management menue it gives error "/itop_design/menu[ServiceManagement] at line 0: could not be modified (not found)
did you face same issue?
Hi, I found my mistake, I missed to add dependency for my new module it is working fine after adding service management module in dependency
Thanks
Buenas tardes una recomendación que pudo dar para que puedas limitar los menus y que se un control total sobre estos es que tienes que agregar la dependencia de la extension:
Asi ya tendras libertad de modificar los menus
'itop-profiles-itil/1.0.0',
'itop-config-mgmt/2.2.0',
Hello everyone,
I have a problem when applying the 'Delegate 'Admin tools' menus' documentation.
Paragraph:
WebPageMenuNode need to be secured against direct access (a user may guess the url of a webPage and try to access it even if he do not see the menu). To do so, each web page is checking against ApplicationMenu::CheckMenuIdEnabled(“MenuId”); with MenuIdbeeing the id used in the xml definition of the menu. This ensure that in order to be able to execute a webpage the user must have access to the corresponding menu.
In which it mentions in this paragraph that we can add more security by preventing the profile from being able to access that menu from the link.
However, I don't know how to apply it within the code, so I ask for your collaboration.