FIS role for import – update (fisRoleUpdate)

The following code presents the ImageMaster role definition “fisRoleUpdate”, which is required for the FIS import operations “update”, “smartUpdate”, and “bulkUpdateAttributes”. A role administrator can use this SOAP request to deploy the role.

<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:ns="http://www.tsystems.com/ima9/integrationws/messaging/201101">
   <soap:Header>
      <user:user xmlns:user="http://www.tsystems.com/ima/9.0/integrationws/header/user">powerUser</user:user>
   </soap:Header>
   <soap:Body>
      <ns:createRole>
         <role name="fisRoleUpdate">
            <combinator>union</combinator>
            <constituents>
               <roles/>
               <rights>
                  <right outcome="permitted">
                     <query>restrict(or(
                         =(ima:webservice:operationName(ref("webservice:operations")), const("alterMultipleAttributes")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("getLogConfig")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("getLogCustomization")),           
                         =(ima:webservice:operationName(ref("webservice:operations")), const("getProperties")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("getCurrentTenant")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("listDocumentTypes")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("listAttributeTypes")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("query")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("checkinRevision")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("checkoutRevision")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("cancelCheckout")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("checkoutLatestRevision")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("updateMetadata")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("updateAttributes")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("deleteContent")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("updateContent")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("createContent")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("createDocument"))
                         =(ima:webservice:operationName(ref("webservice:operations")), const("getContent")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("getRevision")),
                         =(ima:webservice:operationName(ref("webservice:operations")), const("smartUpdate"))),
                         galaxy(webservice:operations))</query>
                     <functions>
                        <function>execute</function>
                     </functions>
                  </right>
                  <!--may do anything with any revision to be created-->
                  <right outcome="permitted">
                     <query>galaxy(params:createRevision)</query>
                     <functions>
                        <function>create</function>
                     </functions>
                  </right>
                  <!--may do anything with any (persistent) revision-->
                  <right outcome="permitted">
                     <query>galaxy(revisions)</query>
                     <allFunctions/>
                  </right>                
                  <!--may do anything with any document-->
                  <right outcome="permitted">
                     <query>galaxy(documents)</query>
                     <allFunctions/>
                  </right>
                  <!--may do anything with any content-->
                  <right outcome="permitted">
                     <query>galaxy(contents)</query>
                     <allFunctions/>
                  </right>
                  <!--may do anything with any (persistent) document type-->
                  <right outcome="permitted">
                     <query>galaxy(documentTypes)</query>
                     <allFunctions/>
                  </right>
                  <!--may do anything with any attribute definition-->
                  <right outcome="permitted">
                     <query>galaxy(attributeDefs)</query>
                     <allFunctions/>
                  </right>
                  <!--may do anything with any attribute type-->
                  <right outcome="permitted">
                     <query>galaxy(attributeTypes)</query>
                     <allFunctions/>
                  </right>
                  <!--may do anything with any binary object-->
                  <right outcome="permitted">
                     <query>galaxy(binaryObjects)</query>
                     <allFunctions/>
                  </right>                 
               </rights>
            </constituents>
            <description>FIS Role for commands UpdateDocuments, SmartUpdateDocuments, BulkUpdateAttributes</description>
         </role>
      </ns:createRole>
   </soap:Body>
</soap:Envelope>