cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

ACL – Old Role groups vs New Role Principals

Highlighted
Regular Member

ACL – Old Role groups vs New Role Principals

In the past when an ACL policy rule was created that applied to a specific role, I can see that the principal referenced by WTAclEntry is of type wt.org.WTGroup. This “Role Group” shares the name as the container team role.

For more recently created but equivalent rules, I can see the referenced principal is of type wt.org.WTRolePrincipal.

Example

Old rule - ‘principal = Group’ and ‘principal name = teamMembers’

New rule - ‘principal = Role’ name ‘principal name = Team Members’

Anybody know when and why this change was made by PTC?

We will embark on a big ACL clean up shortly, is there any benefit to update old rules that currently reference role groups so they reference role principals, which appears to be the new standard?

Tags (2)
1 REPLY 1
Highlighted

Re: ACL – Old Role groups vs New Role Principals

Hi Darren,

I think this article should help answer the questions you have in your future implementation.

https://support.ptc.com/appserver/cs/view/solution.jsp?n=CS161997

Thanks,

Jarrett

Announcements