Active Roles 7.2.1 - Web Interface Administrator Guide

Page View Task properties

A command of the Page View Task type has the URL property in addition to the common properties. This property identifies the address of the resource, such as a Web page, that the command is intended to open. When the user clicks the command, the Web Interface navigates to the address specified by the URL property.

For more information and instructions on how to implement and use commands of this type, see “Developing Custom Web Pages” in the Active Roles SDK.

Set Attribute Task properties

A command of the Set Attribute Task type has the following properties in addition to the common properties:

• Attribute to set  The LDAP Display Name of a certain attribute. The command assigns a value to that attribute. You can select the desired attribute from a list.
• Value to assign  The command assigns this value to the attribute, or clears the attribute if no value specified. For a Boolean attribute, the value can be either True or False.
• Enable confirmation message  When this option is selected, clicking the command displays a certain message to obtain the user's consent.
• Confirmation message  Specifies the message to display when the user clicks the command. The user has the option to confirm or cancel the command.

Command visibility options

A command on an object in the Web Interface, such as Delete or Rename, can be either visible or hidden. If a command is visible, the user can click the command and have the Web Interface process the command accordingly. If a command is hidden, it is effectively disabled.

Normally, the Web Interface displays or hides a command depending on whether or not the user has sufficient rights to perform the respective operation on the object that the user has selected (for example, delete or rename the object). However, certain scenarios may require that a particular command be hidden or displayed depending on the properties of the selected object. Another requirement could be to hide or display a command depending on whether or not the user is authorized to make certain changes to the selected object.

To address these requirements, the Web Interface provides a number of options that control the visibility of a command to the user. The visibility options on a command take the form of conditions that are evaluated when a particular user selects a particular object in the Web Interface. Assuming the command is applicable to the type of the selected object, the command is displayed if each of the conditions evaluates to True.

By setting up the appropriate conditions on a command, the administrator can control the visibility of the command in the following ways:

• Show the command if the properties of the selected object meet certain requirements (for example, the description of the object is set to the text string specified); otherwise, hide the command. The conditions that control the command visibility in this way are referred to as property-related conditions.
• Show the command if the user is authorized to modify certain properties of the selected object (for example, the user is authorized to change the description of the object); otherwise, hide the command. The conditions that control the command visibility in this way are referred to as access-related conditions.

It is possible to set up only property-related conditions, only access-related conditions, or both. The command is displayed if all the specified conditions evaluate to True. If at least one of the specified conditions is not met, the command is hidden.

To configure visibility options on a command

1. In the Customization section of the Web Interface, select the command that you want to configure.
2. Click the Visibility tab on the page for managing the properties of the command.
3. Select the option to set up visibility conditions.
4. To set up property-related conditions, click Configure.
5. Do the following:
   • To add a condition, select a property, type in a value, and click Add Requirement.
   • To remove a condition, select it from the list and click Remove.
   • When finished, click OK.

   When you select a property and supply a value, either a new condition is added to the list or the supplied value is added to the existing condition that is based on the selected property. The latter occurs if the property is already in the list of the property-related conditions. This allows you to configure a condition that evaluates to True if the property has any one of the values specified. If only one value is supplied for a particular condition, then the condition evaluates to True if the property has exactly the value specified.

6. To set up access-related conditions, do the following:
   • If you want to add a condition, click Add, select a certain property, and click OK.
   • If you want to remove a condition, select it from the list and click Remove.

   When you select a property and click OK, a new condition is added that evaluates to True if the user has sufficient rights in Active Roles to make changes to that property of the object selected by the user in the Web Interface.

7. Click Save. Then, click Reload to publish your changes.

Configuring forms

A form is a set of pages associated with a command that requires data entry. You can customize a form by adding or removing entries.

Each entry is intended to view or modify certain portions of directory data referred to as object attributes or properties. You can rearrange entries or adjust their behavior as needed.

To start customizing a form, you must first open that form in the Form Editor.

To open a form in the Form Editor

1. On the Web Interface home page, click Customization, and then click Customization Tasks.

   - OR -

   On the Navigation bar, expand Customization, and then click Directory Objects.

2. In the list of menus, click the menu that contains the command linked with the form you want to configure.
3. In the list of commands, click the command that is linked with the form you want to configure.
4. In the right pane, click Edit Form.

   If no form is linked with the command you selected, the right pane does not contain the Edit Form command.