cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

Community Tip - When posting, your subject should be specific and summarize your question. Here are some additional tips on asking a great question. X

ACL – Old Role groups vs New Role Principals

DarrenStorey
7-Bedrock

ACL – Old Role groups vs New Role Principals

In the past when an ACL policy rule was created that applied to a specific role, I can see that the principal referenced by WTAclEntry is of type wt.org.WTGroup. This “Role Group” shares the name as the container team role.

For more recently created but equivalent rules, I can see the referenced principal is of type wt.org.WTRolePrincipal.

Example

Old rule - ‘principal = Group’ and ‘principal name = teamMembers’

New rule - ‘principal = Role’ name ‘principal name = Team Members’

Anybody know when and why this change was made by PTC?

We will embark on a big ACL clean up shortly, is there any benefit to update old rules that currently reference role groups so they reference role principals, which appears to be the new standard?

1 REPLY 1

Hi Darren,

I think this article should help answer the questions you have in your future implementation.

https://support.ptc.com/appserver/cs/view/solution.jsp?n=CS161997

Thanks,

Jarrett

Top Tags