Here are the migration details and migration notes for roles and permissions
data.
Migration Overview
- Project roles are migrated appropriately.
- CEE's equivalent of Project roles with global/all projects visibility are
global project roles in CTF 16.10 and these roles are migrated appropriately.
- CEE's equivalent of Domain Roles are Site-wide roles in CTF 16.10 and these
are migrated appropriately.
- There is no equivalent of CEE's Host roles, users belonging to "Host Admin"
role are migrated as Site Administrators in CTF 16.10. Users belonging to
other Host roles, if any, will lose such roles after migration and the
details are exception reported.
- CEE's Host SuperUser (root) is mapped to CTF 16.10's TeamForge Administrator
(admin).
- For details of the mapped permissions, see User permissions on a CEE and CTF 16.10 site or User permissions in CEE and CTF 16.10 projects
- User and group associations with the roles are retained.
- Role associations with internal user groups - Host Users and Domain Users,
are not migrated since the feature is not available in CTF. These mappings
will appear in the exception report.
- Project role requests from CEE projects are migrated as same to CTF
16.10.
- CTF 16.10 administrators can configure permission mapping using the
configuration file. The permissionmapping.conf
configuration file is available here:
/opt/collabnet/cee_dump_load/conf/.
This table shows how fields in CEE map to fields in CTF 16.10:
| CEE |
CTF 16.10 |
| Host administrators |
Site-administrators |
| Domain roles |
Site-wide roles |
| Project roles |
Project roles |
| Project roles with All projects visibility |
Global project roles |
| Name |
Role Name |
| Description |
Description |
| Requestable |
Requestable |
| Ownership Role |
None |
| Grant role on subproject creation |
None |
| Block recursion into private projects |
Prevent Access (Site-wide roles) or Prevent Inheritance (Project/Global
roles) |
Notes
- CEE's Host roles are not migrated, multi-tenancy is implemented differently
in CTF 16.10.
- Domain Roles - Registered User role is dropped in favor of "Default Access
Permissions" at individual project level. In CTF 16.10, there is no global
control like a domain role.
- Domain Roles - Anonymous Guest role is dropped in favor of "Default Access
Permissions" at individual project level. In CTF 16.10, there is no global
control like a domain role.
- The Ownership role and Grant role on sub-project creation functionalities
are dropped.
- If the role creation/modification date is not found in the audit log, either
the project creation/modification or the fall-back date is used. The default
fall-back value is "2000-01-01 00:00:00", as specified in the
/opt/collabnet/cee_dump_load/conf/c6migrate.conf
file.