16.15. Configuring Roles

Each line of the soa-roles.properties file defines a new role of the following form.

<role>=<privilege>[.<repositoryName>[.<workspaceName>]]

For example, one of the existing lines is admin=admin,connect,readonly,readwrite, which defines the "admin" role as having all privileges. However, a line such as editCustomer=readonly,readwrite.customer would define a role allowing read access to all repositories and workspaces, but write access only to the repositories using the "customer" source.