NonStop Servlets for JavaServer Pages (NSJSP) 7.0 System Administrator's Guide

Managing NSJSP
NonStop Servlets for JavaServer Pages (NSJSP) 7.0 System Administrator’s Guide674372-005
4-10
NSJSP Manager Security
default mapping file which contains the roles and the associated rights. The following is
the content of a rights-controller.properties file:
super=*
admin=admin_view,admin_update
manager=app_view,app_update,cluster_view,cluster_update,mbeans_view,mbeans_update
,deploy_view,deploy_update
observer=app_view,cluster_view,mbeans_view,admin_view
appobserver=app_view
The rights-controller.properties file must be modified when the visibility of
certain NSJSP Manager features need to be modified for a user role. The default copy
of this file contains rights mapping for all the five pre-defined roles, see Table 4-2 for
rights and their corresponding description.
In addition to the NSJSP Manager restricting access to UI components (thus
preventing unauthorized access), there is an URI level security, which is enforced by
mapping roles with the URIs in the deployment descriptor <NSJSP manager
installation directory>/webapps/ROOT/WEB-INF/web.xml for NSJSP