Migrating roles and permissions

Here are the migration details and migration notes for roles and permissions data.

Migration Overview

  • Project roles are migrated appropriately.
  • CEE's equivalent of Project roles with global/all projects visibility are global project roles in CTF 8.2 and these roles are migrated appropriately.
  • CEE's equivalent of Domain Roles are Site-wide roles in CTF 8.2 and these are migrated appropriately.
  • There is no equivalent of CEE's Host roles, users belonging to "Host Admin" role are migrated as Site Administrators in CTF 8.2. Users belonging to other Host roles, if any, will lose such roles after migration and the details are exception reported.
  • CEE's Host SuperUser (root) is mapped to CTF 8.2's TeamForge Administrator (admin).
  • For details of the mapped permissions, see User permissions on a CEE and CTF 8.2 site or User permissions in CEE and CTF 8.2 projects
  • User and group associations with the roles are retained.
  • Role associations with internal user groups - Host Users and Domain Users, are not migrated since the feature is not available in CTF. These mappings will appear in the exception report.
  • Project role requests from CEE projects are migrated as same to CTF 8.2.
  • CTF 8.2 administrators can configure permission mapping using the configuration file. The permissionmapping.conf configuration file is available here: /opt/collabnet/cee_dump_load/conf/.

This table shows how fields in CEE map to fields in CTF 8.2:

CEE CTF 8.2
Host administrators Site-administrators
Domain roles Site-wide roles
Project roles Project roles
Project roles with All projects visibility Global project roles
Name Role Name
Description Description
Requestable Requestable
Ownership Role None
Grant role on subproject creation None
Block recursion into private projects Prevent Access (Site-wide roles) or Prevent Inheritance (Project/Global roles)

Notes

  • CEE's Host roles are not migrated, multi-tenancy is implemented differently in CTF 8.2.
  • Domain Roles - Registered User role is dropped in favor of "Default Access Permissions" at individual project level. In CTF 8.2, there is no global control like a domain role.
  • Domain Roles - Anonymous Guest role is dropped in favor of "Default Access Permissions" at individual project level. In CTF 8.2, there is no global control like a domain role.
  • The Ownership role and Grant role on sub-project creation functionalities are dropped.
  • If the role creation/modification date is not found in the audit log, either the project creation/modification or the fall-back date is used. The default fall-back value is "2000-01-01 00:00:00", as specified in the /opt/collabnet/cee_dump_load/conf/c6migrate.conf file.