Adding Plug-ins for Delegated Administrator
Syntax and Values for Security.properties File Properties The properties in the file are of the form: Security Element Name=Permission A Security Element Name is of the form:Role Name.Container View Name.Console Element Name A Security Element specifies the Console element and role for which the permission is being defined. If you do not know an element name, view the source of a page to match the name on the page to the Console element you are interested in. The names on the page are fully qualified names. You need to pick up only the last two elements of the name, which form Container View Name.Console Element Name. Valid role names for Delegated Administrator are as follows: “ProviderAdminRole” (SPA) For information about this role, see Appendix A, “Service Provider Administrator and Service Provider Organizations.” “OrganizationAdminRole” (OA) “Top-levelAdminRole” (TLA) “*” (applies a permission to all roles unless it is overridden for a specific role) A permission must be one of the following strings: ■ ■ ■ ■
EDITABLE– indicates that the security element is editable. NONEDITABLE– indicates that the security element is read-only. VISIBLE– indicates that the security element is visible and read-only. INVISIBLE– indicates that the security element is invisible.
Adding Plug-ins for Delegated Administrator You can customize Delegated Administrator to support the following plug-ins: ■
MailHostStorePlugin By default, this plug-in is disabled. If no preferredmailhost is supplied when a business organization is created, an exception will be raised. If the plug-in is enabled, values from the flat file (described later in this section) will be used only if the corresponding attribute is absent.
■
100
MailDomainReportAddressPlugin
Sun Java System Delegated Administrator 6.4 Administration Guide • March 2007