Access Control

For each channel template created, it is possible to add groups and users who will be able to access it and grant permissions to each of them. Channels that have such a template applied receive a copy of this ACL, which can be modified in the channel as needed.

There are two ways to check the access control of a channel template:

• In the browser, right-click on the channel template and select the option Manage Access;

Or

• In the channel's administrative area, select the desired channel template and then Manage Access;

The possible access permissions for a channel template are: manage channel, users, local groups, pages, page template, service instances, as well as managing the security of all these objects. Among the permissions are also viewing pages, page templates, and service instances.  Regarding the page, there is also the permission for its layout. However, if the option Inherit Access Control is enabled, the access control for the inherited groups and users will be inherited from the channel, allowing only the denial of permissions to them. Regardless of inheritance, it is possible to  assign permissions and deny them to users and groups added to the access control of the channel template. By default users and groups added to the access control have permissions to “view page” and “view service instance,” which can be denied as needed.

The figure below is an example of access control of a channel template “template_services,” from which the group “Portal Administrators” was inherited from the channel. Since the option “Inherit Access Control” is enabled, it is not possible to assign permissions to this group, but it is possible to deny them. For the added groups, “Publishers” and “Developers,” permissions can be assigned or denied regardless of inheritance. Additionally, by default, these last two groups have permissions to “view page” and “service instance.”

The permissions of the channel template are the same as the channel.