-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
1/14
Roles QuickStart GuideLiferay Portal 6.2 EE
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
2/14
ROLES QUICK START GUIDE
www.liferay.com
1
IntroductionRoles are a very powerful feature in Liferay Portal. They allow you to take advantage of the
fine-grained permissioning system and control what users or groups of users have access to
resources in large and very small scopes. This guide will help you get started in creating and
applying the basics of Liferay roles.
WHAT EXACTLY IS A ROLE?
A role is a collection of permissions. A role can be applied to a user or group of users. It can even
be applied to a Site or an Organization.
IS A ROLE EQUIVALENT WITH A GROUP?
No, because a role can exist and not have any users associated with it at all. A role is a collection
of permissions. A role can be applied to a group of users, affecting every user that belongs to,
or becomes a member of, that user group.
ARE THERE DIFFERENT TYPES OF ROLES?
Yes, they differ in scope. There are site roles, organization roles, and regular roles. Regular roles
have the largest scope and are applied portal-wide.
WHAT ROLES COME OUT OF THE BOX?
• Administrator
• Owner
• Guest
• User
• Power User
• Site Administrator
• Site Owner
• Site Member
• Organization Administrator
• Organization Owner
• Organization User
You can also create custom roles very easily through the Roles administration in the Control Panel.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
3/14
ROLES QUICK START GUIDE
www.liferay.com
2
Creating A RoleLet’s create a regular role and define its permissions.
CHOOSE THE TYPE AND THE NAME
Navigate to the Control Panel and click on Roles. Use the Add button to create a Regular role.
A Regular role is a role that has a portal-wide scope.
Name the role, and save.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
4/14
ROLES QUICK START GUIDE
www.liferay.com
3
DEFINE THE PERMISSIONS ASSOCIATED WITH THIS ROLE
Now that we’ve created and named the role, we need to define the permissions that the role is
composed of. You can think of a role as a collection of permissions.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
5/14
ROLES QUICK START GUIDE
www.liferay.com
4
Let’s give this role permissions for access via the Control Panel. Click on the Actions button and
choose Define Permissions from the drop-down menu.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
6/14
ROLES QUICK START GUIDE
www.liferay.com
5
For this example, we will limit the access of this role to Web Content. There are many aspects that
are available to be defined for this.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
7/14
ROLES QUICK START GUIDE
www.liferay.com
6
Check all of the actions pertaining to Web Content creation to add them to the role.
Click Save. You now have a role with access to the Liferay WCM in the Control Panel, as well as the
ability to do the above Actions that have been checked.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
8/14
ROLES QUICK START GUIDE
www.liferay.com
7
Applying A RoleNow that we have created a role and defined its permissions, we can apply this role to a user.
ASSIGN MEMBERS TO THIS ROLE
Go to the Roles section on the Control Panel, find the role that you created and click on
Assign Members.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
9/14
ROLES QUICK START GUIDE
www.liferay.com
8
You can assign the role at the User, Site, Organization, and User Group granularities.
For this example, let’s assign this role to a regular (non-Admin) user. Make sure to click on the
Available tab to find your user, check the check box, and click Update Associations in order to
save the role to the user.
TIP: Check to see that the role was applied and that it can be unapplied. In our example, we can
log in as the regular user to check their privileges. If you click on Content under the Admin menu,
you will notice that Web Content is the only administrative function visible to you.
To remove this access, you can go back to the Roles section to either unassign the user from that
role in the Assign Members section, or the Role can be modified using the Define Permissions
section and removing (unchecking) the resources added earlier.
ROLE SCOPE
We have created a role with Regular scope. It is also possible to create roles that are scoped to a
Liferay Organization and to a Liferay Site. This is particularly helpful when the Liferay Portal Omni
Admin finds it useful to delegate different users to be the administrator for an Organization or Site.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
10/14
ROLES QUICK START GUIDE
www.liferay.com
9
Roles in ActionIn addition to defining permissions for a role, you can limit access to different resources from the
resource itself.
APPLY THE ROLE TO A RESOURCE
Perhaps you have deployed and/or placed a portlet on a page and wish to limit its access.
Let’s create some web content and limit the View access to only the newly created Role.
Click on the Permissions tab and use the permissions and roles matrix to remove and give
View access. Make sure to remove View access from the Guest role and Site Member Role,
and to grant View access to the role you created earlier, then save.
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
11/14
ROLES QUICK START GUIDE
www.liferay.com
10
In order to test if these settings have taken effect, log out of the portal. Without logging back in
(using the Guest role access), access the page with the portlet in which you limited View access.
You can see that the portlet does not appear.
However, when you log in with the user that has the previously created role, it is visible.
In addition to portlets, you can also limit access to pages, buttons, and anything else in Liferay
Portal that has been designated as a resource and has a permissions configuration icon (the gear).
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
12/14
ROLES QUICK START GUIDE
www.liferay.com
11
USERS CAN HAVE MULTIPLE ROLES
Perhaps you have deployed and/or placed a portlet on a page and wish to limit its access.
Let’s give View access only to the role you created. You can do this from the portlet’s
configuration page, which is accessible via the wrench and gear.
RolesPages
User Teams
User Groups
ORGANIZATION
PagesRoles
Teams
COMMUNITY
User
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
13/14
ROLES QUICK START GUIDE
www.liferay.com
12
Additional Resources The definitive resources on Liferay Portal, including the configurations discussed in this guide, are:
Liferay Portal User Guide (online):
http://www.liferay.com/documentation/liferay-portal/6.2/user-guide
Mastering Liferay Fundamentals (course):
http://www.liferay.com/services/training/topics/fundamentals
Administering Liferay Systems (course):
http://www.liferay.com/services/training/topics/system-admin
Liferay Roles (online):
http://www.liferay.com/documentation/liferay-portal/6.2/user-guide/-/ai/roles-and-permissions-
liferay-portal-6-2-user-guide-16-en
SummaryIn this guide, we outlined some quick ways to create and apply Liferay Roles after downloadinga Liferay Portal bundle. This is by no means a complete guide, but the best practices presented
here can help you start out on the right foot and avoid some common pitfalls.
DisclaimerLiferay can only give you initial recommendations based on best practices and the experience
of professionals working with Liferay customers. Ultimately, it is your responsibility as system
architects and business analysts to come up with the scenarios that your system will need to
address and to run the appropriate tests on your system before production deployment, so that
you can identify significant circumstances and other unforeseen system and network issues.
Please use these settings at your own risk.
Moving Forward
Get a Free DemoA Liferay team member is available to give you an in-depth look into the Liferay Portal features
and solutions that are helping enterprises worldwide realize their goals. Our customers include
top companies across industries such as Allianz, Cisco Systems, Domino’s Pizza, Rolex and Toyota.
Request a free demo today at www.liferay.com/top-5-things-62/request-a-demo.
https://www.liferay.com/top-5-things-62/request-a-demohttps://www.liferay.com/top-5-things-62/request-a-demo
-
8/16/2019 Liferay Portal 6_2 EE Roles Quick Start Guide
14/14
Liferay is a provider of leading enterprise open source portal
and collaboration software products, used by major enterprises
worldwide including Allianz, Carrefour, Cisco Systems, Danone,
Lufthansa Flight Training, Rolex, Siemens, Société Générale,
Toyota and the United Nations. Liferay, Inc. offers professional services,
technical support, custom development, and professional training to
ensure successful deployment in the most demanding IT environments.
© 2014, Liferay, Inc. All rights reserved.