Here are the migration details and migration notes for roles and permissions
data.
Migration Overview
- Project roles are migrated appropriately.
- CEE's equivalent of Project roles with global/all projects visibility are
Global roles in CTF 6.0 and these roles are migrated appropriately.
- CEE's equivalent of Domain Roles are Site-wide roles in CTF 6.0 and these
are migrated appropriately.
- There is no equivalent of CEE's Host roles, users belonging to "Host Admin"
role are migrated as Site Administrators in CTF 6.0. Users belonging to
other Host roles, if any, will lose such roles after migration and the
details are exception reported.
- CEE's Host SuperUser (root) is mapped to CTF 6.0's TeamForge Administrator
(admin).
- For details of the mapped permissions, see ../reference/migration_ref_permissionmapping-site.html or ../reference/migration_ref_permissionmapping-project.html
- User and group associations with the roles are retained.
- Role associations with internal user groups - Host Users,
are not migrated since the feature is not available in CTF. These mappings
will appear in the exception report.
- CEE's default usergroup "*Domain Users" is migrated and mapped
to the "All Users" group in CTF.
- Project role requests from CEE projects are migrated as same to CTF
6.0.
- CTF 6.0 administrators can configure permission mapping using the
configuration file. The permissionmapping.conf
configuration file is available here:
/opt/collabnet/cee_dump_load/conf/.
This table shows how fields in CEE map to fields in CTF 6.0:
| CEE |
CTF 6.0 |
| Host administrators |
Site-administrators |
| Domain roles |
Site-wide roles |
| Project roles |
Project roles |
| Project roles with All projects visibility |
Global roles |
| Name |
Role Name |
| Description |
Description |
| Requestable |
Requestable |
| Ownership Role |
None |
| Grant role on subproject creation |
None |
| Block recursion into private projects |
Prevent Access (Site-wide roles) or Prevent Inheritance (Project/Global
roles) |
Notes
- CEE's Host roles are not migrated, multi-tenancy is implemented differently
in CTF 6.0.
- Domain Roles - Registered User role is dropped in favor of "Default Access
Permissions" at individual project level. In CTF 6.0, there is no global
control like a domain role.
- Domain Roles - Anonymous Guest role is dropped in favor of "Default Access
Permissions" at individual project level. In CTF 6.0, there is no global
control like a domain role.
- The Ownership role and Grant role on sub-project creation functionalities
are dropped.
- If the role creation/modification date is not found in the audit log, either
the project creation/modification or the fall-back date is used. The default
fall-back value is "2000-01-01 00:00:00", as specified in the
/opt/collabnet/cee_dump_load/conf/c6migrate.conf
file.