CA Service Management

  • 1.  Restrict view of my profile in CA Service Catalog

    Posted Jul 11, 2017 11:29 AM

    Hi, Is it possible to disable the view of my profile in CA Service Catalog for users with end user role?

     

     


    I tried it by removing the following resources (guinode__changepwd,guinode__editmyprofile,guinode__editmyprofileconfirm) from the Guinode policy "ACL_catalogenduser_Guinodes"

     

    But it does not work

     

    Thanks!



  • 2.  Re: Restrict view of my profile in CA Service Catalog

    Broadcom Employee
    Posted Jul 11, 2017 11:41 AM

    Hi,

     

    Do you want to restrict them from updating the profile? If so, the following document might help:

     

    How to restrict end users from updating the user profile 

     

    Regards,

    Pablo



  • 3.  Re: Restrict view of my profile in CA Service Catalog

    Posted Jul 11, 2017 01:07 PM

    Thanks, I've tried it but it also restricts me to the admin user, is there any other way that only affects the roles you want?



  • 4.  Re: Restrict view of my profile in CA Service Catalog
    Best Answer

    Broadcom Employee
    Posted Jul 11, 2017 02:50 PM

    I think you need to create some code to detect the role being used ($curRole) and for end user or roles that are restricted use:

     

    <input tabindex="1" maxlength="100" type="text" id="first_name" size="30" value="{COLLECTION/icuser/first_name/LITERAL}" disabled="true" />

     

    and for the other roles which are not restricted:

     

    <input tabindex="1" maxlength="100" type="text" id="first_name" size="30" value="{COLLECTION/icuser/first_name/LITERAL}" />

     

    Hope this helps.

     

    Regards,

    Pablo



  • 5.  Re: Restrict view of my profile in CA Service Catalog

    Posted Jul 17, 2017 08:59 AM

    Hi. this is the code, Basically I hide the icons

     

    <!-- Begin customization  -->                         
                             <xsl:variable name="curRole" select="/xmlRoot/icuser/icgroupname"/>
                             <xsl:choose>
                             <xsl:when test="not($curRole='spadministrator')">
                           <input size="45" id="delegate" disabled="true" value="{COLLECTION/icuser/delegate/req_delegateCN/LITERAL}"/>
                          <a tabindex="26" href="javascript:adddelegateclick()">
                            <!--img hspace="3" align="absmiddle" id="search_for_auto_delegate" src="images/icon-search.gif" title="{$xslcontent/search_for_delegate}" border="0" disabled="true"/-->
                          </a>
                          <a tabindex="27" href="javascript:removedelegate()" id="delegateicon">
                            <!--img hspace="3" align="absmiddle" id="deselect_delegate" src="images/tb_delete.png" title="{$xslcontent/deselect_delegate}" border="0" disabled="true"/-->
                          </a>
                             </xsl:when>
                             <xsl:otherwise>
                            <input size="45" id="delegate" disabled="true" value="{COLLECTION/icuser/delegate/req_delegateCN/LITERAL}"/>
                          <a tabindex="26" href="javascript:adddelegateclick()">
                            <img hspace="3" align="absmiddle" id="search_for_auto_delegate" src="images/icon-search.gif" title="{$xslcontent/search_for_delegate}" border="0"/>
                          </a>
                          <a tabindex="27" href="javascript:removedelegate()" id="delegateicon">
                            <img hspace="3" align="absmiddle" id="deselect_delegate" src="images/tb_delete.png" title="{$xslcontent/deselect_delegate}" border="0"/>
                          </a>
                             </xsl:otherwise>
                             </xsl:choose>
    <!-- End customization -->

    Thanks to oyapa01 All credits are for him.