Here are the migration details and migration notes for roles and permissions
data.
Migration Overview
- Project roles are migrated appropriately.
- CEE's equivalent of Project roles with global/all projects visibility are
global project roles in CTF 17.11 and these roles are migrated appropriately.
- CEE's equivalent of Domain Roles are Site-wide roles in CTF 17.11 and these
are migrated appropriately.
- There is no equivalent of CEE's Host roles, users belonging to "Host Admin"
role are migrated as Site Administrators in CTF 17.11. Users belonging to
other Host roles, if any, will lose such roles after migration and the
details are exception reported.
- CEE's Host SuperUser (root) is mapped to CTF 17.11's TeamForge Administrator
(admin).
- For details of the mapped permissions, see User permissions on a CEE and CTF 17.11 site or User permissions in CEE and CTF 17.11 projects
- User and group associations with the roles are retained.
- Role associations with internal user groups - Host Users and Domain Users,
are not migrated since the feature is not available in CTF. These mappings
will appear in the exception report.
- Project role requests from CEE projects are migrated as same to CTF
17.11.
- CTF 17.11 administrators can configure permission mapping using the
configuration file. The permissionmapping.conf
configuration file is available here:
/opt/collabnet/cee_dump_load/conf/.
This table shows how fields in CEE map to fields in CTF 17.11:
| CEE |
CTF 17.11 |
| Host administrators |
Site-administrators |
| Domain roles |
Site-wide roles |
| Project roles |
Project roles |
| Project roles with All projects visibility |
Global project roles |
| Name |
Role Name |
| Description |
Description |
| Requestable |
Requestable |
| Ownership Role |
None |
| Grant role on subproject creation |
None |
| Block recursion into private projects |
Prevent Access (Site-wide roles) or Prevent Inheritance (Project/Global
roles) |
Notes
- CEE's Host roles are not migrated, multi-tenancy is implemented differently
in CTF 17.11.
- Domain Roles - Registered User role is dropped in favor of "Default Access
Permissions" at individual project level. In CTF 17.11, there is no global
control like a domain role.
- Domain Roles - Anonymous Guest role is dropped in favor of "Default Access
Permissions" at individual project level. In CTF 17.11, there is no global
control like a domain role.
- The Ownership role and Grant role on sub-project creation functionalities
are dropped.
- If the role creation/modification date is not found in the audit log, either
the project creation/modification or the fall-back date is used. The default
fall-back value is "2000-01-01 00:00:00", as specified in the
/opt/collabnet/cee_dump_load/conf/c6migrate.conf
file.