4.3 Delegating Page Group Responsibilities

Oracle Portal provides a collaborative environment that supports the delegation of responsibilities and the assignment of varied levels of access. Some of these features are realized within page groups. For example, Oracle Portal provides different levels of page group privileges that enable you to control who may perform what actions within the page group.

This section provides information about assigning page group privileges, controlling style privileges, and identifying a page group contact. It contains the following subsections:

4.3.1 Assigning Page Group Privileges

You can specify who has access to a page group and how much access they have. Access privileges work incrementally, starting at the global privilege level. For example, you can grant the global privilege View on the object type All Page Groups to the group Site Wide View, then explicitly grant the Manage All privilege on a particular page group to user Rose Doe, who is also a member of Site Wide View. All members of Site Wide View can see the page group, but Rose Doe is the only group member who can do everything else to the page group.

For more information about global privileges, refer to Appendix B, "Page Group Object Privileges" and to the Oracle Fusion Middleware Administrator's Guide for Oracle Portal.

For information about controlling access to the individual pages in a page group, see Section 17.5, "Securing Pages".

This section contains information about specifying who can access a page group in what way. It includes the following subsections:

4.3.1.1 Granting Access to a Page Group

To grant a user or group access to a page group:

  1. Log in to Oracle Portal.

  2. Click the Build tab to bring it forward.

  3. From the Page Groups portlet's Work In drop-down list, choose the page group to be edited.

    By default, the Page Groups portlet is located on the Build tab of the Portal Builder page.

  4. Click the Configure link.

  5. Click the Access tab to bring it forward.

  6. In the Grantee field, enter the name of the user or group needing access.

    Optionally, click the Browse Users or Browse Groups icon and select from the list provided.

    Note:

    Oracle Portal uses the Oracle Internet Directory for identity management. The Oracle Internet Directory serves as the repository for users and groups. In the Oracle Internet Directory, groups are uniquely identified by their distinguished name (DN). Each group has a unique DN, though many groups can share a common name, in the same way that two people can share a common name, yet have completely different lineage (such as John Smith and John Doe). When working within the portal, groups created from within that portal are displayed simply with their common names. However, when the portal references a group from some other location in the Oracle Internet Directory—such as a group from some other portal associated with the same Identity Management Infrastructure—the DN of the group is displayed to distinguish it from the portal's locally defined groups.

  7. From the list of privileges, choose the level of access to grant to the user or group.

    For a list and description of page group privileges, see Section B.2, "Page Group Privileges".

  8. Click Add.

  9. Click OK.

Note:

If you grant a user Manage All privileges on a page group and that user subsequently creates a new page within the page group, even if you remove the user's privileges, he or she will always be able to access the page through its URL and edit the content and add new content.

4.3.1.2 Changing Access to a Page Group

To change a user or group's access to a page group:

  1. Log in to Oracle Portal.

  2. Click the Build tab to bring it forward.

  3. From the Page Groups portlet's Work In drop-down list, choose the page group to be edited.

    By default, the Page Groups portlet is located on the Build tab of the Portal Builder page.

  4. Click the Configure link.

  5. Click the Access tab to bring it forward.

  6. In the Change Access section, find the relevant user or group.

    Note:

    Oracle Portal uses the Oracle Internet Directory for identity management. The Oracle Internet Directory serves as the repository for users and groups. In the Oracle Internet Directory, groups are uniquely identified by their distinguished name (DN). Each group has a unique DN, though many groups can share a common name, in the same way that two people can share a common name, yet have completely different lineage (such as John Smith and John Doe). When working within the portal, groups created from within that portal are displayed simply with their common names. However, when the portal references a group from some other location in the Oracle Internet Directory—such as a group from some other portal associated with the same Identity Management Infrastructure—the DN of the group is displayed to distinguish it from the portal's locally defined groups.

  7. From the Privilege list, choose the new privilege level.

    For a list and description of page group privileges, see Section B.2, "Page Group Privileges".

    Note:

    To completely remove a user or group's privileges on the page group, click the Delete icon next to the user or group whose privileges are being removed.

  8. To make sure that your changes take effect immediately, clear page group cache entries by clicking the Clear Cache link.

    Because of caching, if you change a user or group's page group privileges, your changes may not be immediately apparent if the user or a member of the group has already accessed the page group. For example, the user may be able to see icons or links for actions that he or she is no longer authorized to perform. This may cause confusion if the user clicks one of those icons or links and receives an error message. The remedy is to clear cache after making a change to access privileges.

  9. Click OK.

4.3.2 Controlling Who Can Apply a Different Style to a Page

Oracle Portal provides two settings at the page group level for controlling who can apply different styles to pages:

  • The Allow Privileged Users To Manage Page Style setting is turned on by default. This enables users with the page privilege Manage or Manage Style to apply a different style when editing the page.

    If you turn this setting off, only users with the page group privilege Manage All or Manage Styles can choose different styles when editing pages. For information about applying styles to pages, see Section 11.8, "Applying a Style".

  • The Allow Privileged Users To Personalize Page Style setting is turned on by default. This enables users with the page privilege Personalize (Style) to apply a different style when personalizing the page. Page personalizations affect only the view of the user who made them.

    If you turn this setting off, nobody (not even users with the page privilege Manage or the page group privilege Manage All) can apply a different style when personalizing a page. For information about personalizing a page to apply a different style, see Section 2.3.8, "Applying a New Style to a Page".

To control who can apply a different style to a page:

  1. Log in to Oracle Portal.

  2. Click the Build tab to bring it forward.

  3. From the Page Groups portlet's Work In drop-down list, choose the relevant page group.

    By default, the Page Groups portlet is located on the Build tab of the Portal Builder page.

  4. Click the Configure link.

  5. If necessary, click the Main tab to bring it forward.

  6. Go to the check box Allow Privileged Users To Manage Page Style:

    • Select this check box to allow users with the page privilege Manage or Manage Style to apply a different style when editing the page.

    • Clear this check box to allow only users with the page group privilege Manage All or Manage Styles to apply a different style when editing pages in the page group.

    To make this change take effect immediately, go to the page group properties Access tab and click Clear Cache.

  7. Go to the check box Allow Privileged Users To Personalize Page Style:

    • Select this check box to allow users with the page privilege Personalize (Style) or greater to apply a different style when personalizing the page. Page personalizations affect only the view of the user who made them.

    • Clear this check box to prevent all users from applying a different style when personalizing pages in the page group.

    To make this change take effect immediately, go to the page group properties Access tab and click Clear Cache.

  8. Click OK.

4.3.3 Specifying a Page Group Contact

The page group contact is the person users contact with questions about the page group. This is typically the page group administrator. You can provide an e-mail address for the page group contact and display that address on the pages in the page group.

4.3.3.1 Specifying the Page Group Contact E-mail Address

To specify the page group contact e-mail address:

  1. Log in to Oracle Portal.

  2. Click the Build tab to bring it forward.

  3. From the Page Groups portlet Work in drop-down list, choose the page group to be configured.

    By default, the Page Groups portlet is located on the Build tab of the Portal Builder page.

  4. Click the Configure link.

  5. If necessary, click the Main tab to bring it forward.

  6. In the Contact E-mail field, enter the e-mail address of the page group contact, for example:

    stiger@mycompany.com
    
  7. Click OK.

4.3.3.2 Adding the Page Group Contact E-Mail Address to a Page

Note:

Any user with at least the page privilege Manage Items With Approval or Manage Content on the page can add the page group contact e-mail address to a page.

Use Portal Smart Links to add the contact e-mail address to your portal pages, templates, and navigation pages. If a page has its own contact, that e-mail address is displayed in lieu of the page group contact e-mail address.

To add the contact e-mail address to a page:

  1. Log in to Oracle Portal.

  2. Click the Build tab to bring it forward.

  3. From the Page Groups portlet Work in drop-down list, choose the page group that owns the relevant page.

    By default, the Page Groups portlet is located on the Build tab of the Portal Builder page.

  4. Under Pages in the Layout & Appearance section, click the relevant page.

    This opens the page in Edit mode.

  5. Click the Add Item icon on the region where the contact e-mail address will display.

    If you do not see the Add Item icon, the region may be a portlet region, in which case, you cannot add items to this region.

  6. On the resulting page, select Built-In Navigation Item Types.

  7. From the Built-In Navigation Item Types list, choose Portal Smart Link.

    If you do not see Portal Smart Link in the list, the item type has not been included in the page group. See Section 5.2.2.3, "Making an Item Type Available to a Page Group".

  8. Click Next.

  9. From the Portal Smart Link list, choose Contact.

    For information about the other smart links, refer to Section 13.6.6, "Adding a Portal Smart Link Item".

  10. Enter your own Display Name or select Use The Default Display Name.

    If you provide your own display name, it will not be translated. The exact text that you enter in the Display Name field will be used for all languages. Conversely, the default display name is translated.

  11. Optionally, select an Image to display with the link or by itself, and specify Image Alignment.

  12. Click Finish.