Migrating roles and permissions

Here are the migration details and migration notes for roles and permissions data.

Migration Overview

  • Project roles are migrated appropriately.
  • CEE's equivalent of Project roles with global/all projects visibility are global project roles in CTF 17.8 and these roles are migrated appropriately.
  • CEE's equivalent of Domain Roles are Site-wide roles in CTF 17.8 and these are migrated appropriately.
  • There is no equivalent of CEE's Host roles, users belonging to "Host Admin" role are migrated as Site Administrators in CTF 17.8. Users belonging to other Host roles, if any, will lose such roles after migration and the details are exception reported.
  • CEE's Host SuperUser (root) is mapped to CTF 17.8's TeamForge Administrator (admin).
  • For details of the mapped permissions, see User permissions on a CEE and CTF 17.8 site or User permissions in CEE and CTF 17.8 projects
  • User and group associations with the roles are retained.
  • Role associations with internal user groups - Host Users and Domain Users, are not migrated since the feature is not available in CTF. These mappings will appear in the exception report.
  • Project role requests from CEE projects are migrated as same to CTF 17.8.
  • CTF 17.8 administrators can configure permission mapping using the configuration file. The permissionmapping.conf configuration file is available here: /opt/collabnet/cee_dump_load/conf/.

This table shows how fields in CEE map to fields in CTF 17.8:

CEE CTF 17.8
Host administrators Site-administrators
Domain roles Site-wide roles
Project roles Project roles
Project roles with All projects visibility Global project roles
Name Role Name
Description Description
Requestable Requestable
Ownership Role None
Grant role on subproject creation None
Block recursion into private projects Prevent Access (Site-wide roles) or Prevent Inheritance (Project/Global roles)

Notes

  • CEE's Host roles are not migrated, multi-tenancy is implemented differently in CTF 17.8.
  • Domain Roles - Registered User role is dropped in favor of "Default Access Permissions" at individual project level. In CTF 17.8, there is no global control like a domain role.
  • Domain Roles - Anonymous Guest role is dropped in favor of "Default Access Permissions" at individual project level. In CTF 17.8, there is no global control like a domain role.
  • The Ownership role and Grant role on sub-project creation functionalities are dropped.
  • If the role creation/modification date is not found in the audit log, either the project creation/modification or the fall-back date is used. The default fall-back value is "2000-01-01 00:00:00", as specified in the /opt/collabnet/cee_dump_load/conf/c6migrate.conf file.