Profile to Create Edit only Licenses

[Karthik Reddy]

Hi,

Can someone guide me on how to create security profiles to create separate groups in maintaining separate CI's(Configuration items) in CMBD.

Example:
Servers Create/Edit and delete should be handled by one user
Licenses create/edit and delete should be another user

Currently we only have configuration manager who can create/edit all CI's.

Can someone guide me if this is possible to create/edit particluar CI of CMBD by security profiles.

Thanks

[Guillaume Lajarige]

Hello Karthik,

Take a look at this tutorial, it should help you :)

Cheers,
Guillaume

[Karthik Reddy]

Hi,

Thanks for the quick help. I did check this and created a extension with
new profile for licence manager, but receving an error when user assigned
to this new profile and tried to login.

It is working when I used along with document manager. But if we need to
give only license link for Ci's profile do you advice to have any default
groups or classes or actions we need to give?

<itop_design xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0">
<classes>
<menus>
<user_rights>
<groups></groups></user_rights></menus></classes></itop_design>

<group id="user-content-LICENCEMGR" _delta="define"> <classes> <class id="user-content-Licence"> </class></classes> </group>

</groups>
 <profiles>
  <profile id="100" _delta="define">
    <name>License Manager</name>
    <description>Users with this profile can create,edit and delete

licenses
<groups>
<group id="user-content-LICENCEMGR">
<actions>
<action id="user-content-action:write">allow</action>
<action id="user-content-action:bulk write">allow</action>
<action id="user-content-action:delete">allow</action>
</actions>
</group>
</groups>

Fatal error, iTop cannot continue.
Error: No result for the single row query: 'SELECT DISTINCT Contact.id
AS Contactid, Contact.name AS Contactname, Contact.status AS
Contactstatus, Contact.org_id AS Contactorg_id,
Organization_org_id.name AS Contactorg_name, Contact.email AS
Contactemail, Contact.phone AS Contactphone, Contact.notify AS
Contactnotify, Contact.function AS Contactfunction,
Contact.finalclass AS Contactfinalclass, IF((Contact.finalclass
IN ('Team', 'Contact')), CAST(CONCAT(COALESCE(Contact.name, '')) AS
CHAR), CAST(CONCAT(COALESCE(Contact_poly_Person.first_name, ''),
COALESCE(' ', ''), COALESCE(Contact.name, '')) AS CHAR)) AS
Contactfriendlyname, COALESCE((Contact.status = 'inactive'), 0) AS
Contactobsolescence_flag, Contact.obsolescence_date AS
Contactobsolescence_date,
CAST(CONCAT(COALESCE(Organization_org_id.name, '')) AS CHAR) AS
Contactorg_id_friendlyname, COALESCE((Organization_org_id.status =
'inactive'), 0) AS Contactorg_id_obsolescence_flag FROM contact AS
Contact INNER JOIN organization AS Organization_org_id ON
Contact.org_id = Organization_org_id.id LEFT JOIN person AS
Contact_poly_Person ON Contact.id = Contact_poly_Person.id WHERE
((Contact.id = 31) AND 0) '.

On Thu, Mar 4, 2021 at 3:44 PM Guillaume Lajarige glajarige@users.sourceforge.net wrote:

Hello Karthik,

Take a look at this tutorial
https://www.itophub.io/wiki/page?id=2_7_0%3Acustomization%3Aadd-profile-sample,
it should help you :)

Cheers,
Guillaume

---

Profile to Create Edit only Licenses
https://sourceforge.net/p/itop/discussion/922360/thread/3cefdf031f/?limit=50#fab5

---

Sent from sourceforge.net because you indicated interest in
https://sourceforge.net/p/itop/discussion/922360/

To unsubscribe from further messages, please visit
https://sourceforge.net/auth/subscriptions/

[Karthik Reddy]

Hi Guillaume,

Thanks for the quick help. I did check this and created a extension with new profile for licence manager, but receiving an error when user assigned to this new profile and tried to login.

It is working when I used along with document manager. But if we need to give only license link for Ci's profile do you advice to have any default groups or classes or actions we need to give?

<itop_design xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0">
<classes>
<menus>
<user_rights>
<groups></groups></user_rights></menus></classes></itop_design>

<group id="user-content-LICENCEMGR" _delta="define"> <classes> <class id="user-content-Licence"> </class></classes> </group>

</groups>
 <profiles>
  <profile id="100" _delta="define">
    <name>License Manager</name>
    <description>Users with this profile can create,edit and delete licenses</description>
    <groups>
      <group id="LICENCEMGR">
         <actions>
          <action id="action:write">allow</action>
          <action id="action:bulk write">allow</action>
          <action id="action:delete">allow</action>
        </actions>
      </group>
    </groups>
  </profile>

Error when user tried to login with new profile

Fatal error, iTop cannot continue.
Error: No result for the single row query: 'SELECT DISTINCT Contact.id AS Contactid, Contact.name AS Contactname, Contact.status AS Contactstatus, Contact.org_id AS Contactorg_id, Organization_org_id.name AS Contactorg_name, Contact.email AS Contactemail, Contact.phone AS Contactphone, Contact.notify AS Contactnotify, Contact.function AS Contactfunction, Contact.finalclass AS Contactfinalclass, IF((Contact.finalclass IN ('Team', 'Contact')), CAST(CONCAT(COALESCE(Contact.name, '')) AS CHAR), CAST(CONCAT(COALESCE(Contact_poly_Person.first_name, ''), COALESCE(' ', ''), COALESCE(Contact.name, '')) AS CHAR)) AS Contactfriendlyname, COALESCE((Contact.status = 'inactive'), 0) AS Contactobsolescence_flag, Contact.obsolescence_date AS Contactobsolescence_date, CAST(CONCAT(COALESCE(Organization_org_id.name, '')) AS CHAR) AS Contactorg_id_friendlyname, COALESCE((Organization_org_id.status = 'inactive'), 0) AS Contactorg_id_obsolescence_flag FROM contact AS Contact INNER JOIN organization AS Organization_org_id ON Contact.org_id = Organization_org_id.id LEFT JOIN person AS Contact_poly_Person ON Contact.id = Contact_poly_Person.id WHERE ((Contact.id = 31) AND 0) '.