nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

adding TeamSite user in TS 6.7.1 adds a default role as Editor

ramli

Hi

When I try to create a new TeamSite user using TS 6.7.1 GUI or using the CLT iwuseradm it adds default role as editor. I would like to make the default as Author rather than Editor.

Is there a way we can do this.

eg. /usr/iw/iw-home/bin/iwuseradm all-roles-of-user tsrtl
author
editor
workflowUser

I wanted to remove the editor role and was not able to do that.

Find more posts tagged with

Comments

nbwoven

Whats the CLT you are running to create a new user ?

Final2.rptdesign

ramli

Hi

I tried creating the user through the GUI and it attaches itself to the Editor role. There are two roles it gets associated by default

1. Editor
2. WorkFlowUser

You can visualize it once you create the user and click on the user link on the Mahage user link.

I am not able to remove the Editor role. Due to this I am not able to associate any customized menus for the Author role alone.

Let me know if you require more information.

Thanks
Prasad

MAK

Hi,

In 6.7.1 the roles are added per branch for user and group.
so when you check the user roles from manage user link, you should something like this.
//localhost/default/main/anysubbranch Editor

You may be adding this user to iwEveryone or some other group which has a editor role for the branch.
Go to this branch and click on files->users and roles. You can remove the role from here.
Read the admin guide for more information.

ramli

Hi MAK

you are perfectly right. I did whatever you have explained but whats happening to me is by default it associates to *iwEveryone* which has the role type of an Editor and I am not able to delete this role type.

Due to this, even though I associate every branch with the Author role. The Editor takes precedence.

Please send me your email id and I would send you the screenshots of what I am doing,

Thanks
Prasad

Final2.rptdesign

MAK

Hi,

You have two options:

1. iwEveryone will have a editor role for some branch, may be /default/.
so go to that branch and delete iwEveryone as editor from the branch.

2. If you want different roles/users for each branch, click on the branch properties and uncheck "Inherit from parent"

Hope this helps.

ramli

Hi

Thanks for the mail . I guess I am having a strange issue. Is there an option of finding which branch has IwEveryone. I believe IWEveryone is a group and all the TeamSite users are associated to the group.

I tried your second option but still I am having issues. Even if I create a new user using the command

#iwuseradm add-user test
editor
workflowUser

Something is wrong somewhere, Its just that I am trying to put my heads onto it.

Thanks
Prasad

Adam Stoller

Hi

Thanks for the mail . I guess I am having a strange issue. Is there an option of finding which branch has IwEveryone. I believe IWEveryone is a group and all the TeamSite users are associated to the group.

I tried your second option but still I am having issues. Even if I create a new user using the command

#iwuseradm add-user test
editor
workflowUser

Something is wrong somewhere, Its just that I am trying to put my heads onto it.

Thanks
Prasad

I'm not sure about through the GUI - but I believe you can use the iwaccess CLT to change the roles associated with users or groups on different branches - as such, you may be able to change the role associated with iwEveryone from 'editor' to 'author' on your various branches and then add individuals as 'editor' (or higher) on those branches as desired.

If you cannot do this - perhaps you found a bug that needs to be reported, but I'd think you'd be able to do it.

Frederik

about a month ago, we did a first upgrade install of 6.7.1 on a sandbox.

We came to the same conclusion as you, but haven't had time to follow up.

My findings (could easily be wrong or badly remembered) :

(1) iwEveryone: implicit GROUP that contains every defined user. Membership can not be controlled.
(2) iwEveryone is given editor ROLE on the root node //tsserver.
(3) The webUI (ccpro) does not allow to view nor change the role settings at the //tsserver level. It only allows this at lower store & branch level.
(4) by default, all stores & branches are set to inherit users and roles from parent (see the "Properties").
(5) Bad documentation: nothing of (1), (2), (3) seems to be documented anywhere (IIRC)

=> one workaround to your problem is to go to the store (e.g. //tsserver/default) and disable inherit users and roles from parent. Then set up your own roles on store & branches... I believe we tested this, OK.

=> another workaround could be to try and use the CLT to remove the role editor for iwEveryone at the //tsserver level. I'm believe we did not tried that... I'm a bit afraid it may break stuff, since it's not documented and I can only guess it's there for a reason.

Somebody should really make a Support Call to find out some of this stuff... maybe some day I'll make the time.

ramli

Frederik:
You have clearly explained my problem and Thanks a lot for that. here are my few cents

This happens only when you do a migration of an old backing store to TS 6.7.1. I actually avoided the iwaccessmigrate step during the migration process. May be it happened because of that. I did run the iwaccessmigrate just now and I guess, I am having couple of other problems

If you use an existing store created by TS 6.7.1 this problem doesn't occur. I am currently retracing my steps to check on my migration process. Would have a proper update.

Ghoti: I would have your suggestions in mind.

Thanks a lot
Prasad

beez

TeamSite adds a temporary permission entry for iwEveryone/Editor/server root when iwusermigrate is run. This is used during migration. Iwaccessmigrate removes this as a last step.

As others have pointed out, you can easily remove this permission entry.

--Mike

vmarella

I am facing exact same problem (editor role is assigned to "iwEveryone" by default). Even if i remove this permission-entry, it comes back when the TS server is restarted. Does anybody know a permanent fix for this ?

Thanks,
Vivek

namithapai

Hi,

I have a reverse problem. I am not able to add editor role to the default branch. I get only workflowUser and I can add at branch level only.

when I look at iwaccess or iwuseradm I can see the default roles of a user but cannot add Editor to either a user/group. Is there a CLT that can do it?

Thanks