{"id":877,"date":"2008-09-30T16:36:13","date_gmt":"2008-09-30T20:36:13","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2008\/09\/30\/security-users-groups-accounts-in-oracle-content-server-ecmucm\/"},"modified":"2008-09-30T16:36:13","modified_gmt":"2008-09-30T20:36:13","slug":"security-users-groups-accounts-in-oracle-content-server-ecmucm","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2008\/09\/30\/security-users-groups-accounts-in-oracle-content-server-ecmucm\/","title":{"rendered":"Security (Users, Groups, Accounts) in Oracle Content Server (ECM\/UCM)"},"content":{"rendered":"

Oracle Content Server<\/strong> is main component\u00a0in Oracle’s Enterprise Content Management<\/strong>\/ Universal Content Management <\/strong>(ECM\/UCM – Stellent<\/strong>). This post covers Security (User<\/strong>, Group<\/strong> and Accounts<\/strong>)\u00a0Management in Oracle Content Server.<\/p>\n

1.<\/strong> Content Server offers two levels<\/strong> of security on Content Item
\na)<\/strong> Security Groups<\/strong> (Required)
\nb)<\/strong> Accounts<\/strong> (optional)<\/p>\n

–<\/strong>If Accounts are in use, Account becomes primary permission to satisfy<\/strong> before security group permissions are applied.
\n–<\/strong> Account Names\u00a0CAN NOT<\/strong>\u00a0exceed 30 characters<\/p>\n

2.<\/strong>Each content item (word, pdf, multimedia file..) is assigned to security group and if accounts<\/strong> are enabled then content items could also be assigned to Accounts.<\/p>\n

3.<\/strong> Users are assigned Read<\/strong>, Write<\/strong>, Delete<\/strong>, Admin<\/strong> privileges for each security group<\/strong> and Account<\/strong>.<\/p>\n

4.<\/strong> Content Server offers three options<\/strong> for Security
\na) Internal Security<\/strong> – User security within Content Server
\nb) External Security<\/strong>– User logins, password and permissions are in external source (AD, LDAP, AD with LDAP)
\nc) Additional Security<\/strong> – some users using internal security<\/strong> while others external<\/strong>.<\/p>\n

5.<\/strong> There are three login type users<\/strong> in content server
\na) Local Users<\/strong> – Users defined with in content server by Administrators
\nb) Global Users<\/strong>– lightly managed users, credentials extends to multiple content server (proxied server).
\nc) External Users<\/strong> – Users defined outside content server and authenticated through external security.<\/p>\n

6.<\/strong> To add security Users and Groups use “User Admin Application<\/strong>”<\/p>\n

7.<\/strong> You can run “User Admin Application” in two ways
\na) Administration Page<\/strong> (as Java Applet from Browser)
\nLogin to Content Server as administrator -> Administration -> Admin Applets<\/p>\n

<\/a><\/p>\n

<\/a><\/p>\n

.<\/p>\n

b) Standalone Mode<\/strong> (from machine where Content Server is running)<\/p>\n

i) cd $INSTALL_DIR\/bin
\nii) .\/UserAdmin<\/strong><\/p>\n

<\/a>
\n<\/a>
\n<\/a><\/p>\n

.<\/p>\n

8.<\/strong>Login name is case sensitive<\/strong> in Content Server
\nfor ex. sysadmin, Sysadmin, SysAdmin, SYSADMIN are four different users.<\/p>\n

9.<\/strong> Default users in Content Server are sysadmin<\/strong> (Superuser) and user1<\/strong> (contributor) with default password as idc<\/strong><\/p>\n

10.<\/strong> It is possible to Authenticate user against Active Directory<\/strong> or LDAP Server<\/strong><\/p>\n

.<\/p>\n

References<\/u><\/strong><\/p>\n