The following code presents the ImageMaster role definition “fisRoleMigrate”, which is required for documents migration and deletion of migrated documents. A role administrator may use this SOAP request to deploy the role.
Be aware: Copy and paste from an example in this PDF into a text file that shall be processed by FIS can result in errors due to the encoding of special characters that can get broken!
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:ns="http://www.tsystems.com/ima9/integrationws/messaging/201101">
<soap:Header>
<user:user xmlns:user="http://www.tsystems.com/ima/9.0/integrationws/header/user">powerUser</user:user>
</soap:Header>
<soap:Body>
<ns:createRole>
<role name="fisRoleMigrate">
<combinator>union</combinator>
<constituents>
<roles/>
<rights>
<right outcome="permitted">
<query>restrict(or(
=(ima:webservice:operationName(ref("webservice:operations")), const("getLogConfig")),
=(ima:webservice:operationName(ref("webservice:operations")), const("getLogCustomization")),
=(ima:webservice:operationName(ref("webservice:operations")), const("getProperties")),
=(ima:webservice:operationName(ref("webservice:operations")), const("getCurrentTenant")),
=(ima:webservice:operationName(ref("webservice:operations")), const("listDocumentTypes")),
=(ima:webservice:operationName(ref("webservice:operations")), const("listAttributeTypes")),
=(ima:webservice:operationName(ref("webservice:operations")), const("query")),
=(ima:webservice:operationName(ref("webservice:operations")), const("migrateDocument")),
=(ima:webservice:operationName(ref("webservice:operations")), const("deleteMigratedDocument")),
=(ima:webservice:operationName(ref("webservice:operations")), const("eraseMigratedDocument")),
=(ima:webservice:operationName(ref("webservice:operations")), const("writeAuditEvent"))),
galaxy(webservice:operations))</query>
<functions>
<function>execute</function>
</functions>
</right>
<!--may do anything with any revision to be created-->
<right outcome="permitted">
<query>galaxy(params:createRevision)</query>
<functions>
<function>create</function>
</functions>
</right>
<!--may erase any revision-->
<right outcome="permitted">
<query>galaxy(params:eraseRevision)</query>
<functions>
<function>erase</function>
</functions>
</right>
<!--may do anything with any (persistent) revision-->
<right outcome="permitted">
<query>galaxy(revisions)</query>
<allFunctions/>
</right>
<!--may do anything with any document-->
<right outcome="permitted">
<query>galaxy(documents)</query>
<allFunctions/>
</right>
<!--may do anything with any content-->
<right outcome="permitted">
<query>galaxy(contents)</query>
<allFunctions/>
</right>
<!--may do anything with any (persistent) document type-->
<right outcome="permitted">
<query>galaxy(documentTypes)</query>
<allFunctions/>
</right>
<!--may do anything with any attribute definition-->
<right outcome="permitted">
<query>galaxy(attributeDefs)</query>
<allFunctions/>
</right>
<!--may do anything with any attribute type-->
<right outcome="permitted">
<query>galaxy(attributeTypes)</query>
<allFunctions/>
</right>
<!--may do anything with any binary object-->
<right outcome="permitted">
<query>galaxy(binaryObjects)</query>
<allFunctions/>
</right>
<!--may do anything with folders -->
<right outcome="permitted">
<query>galaxy(folders)</query>
<allFunctions/>
</right>
<right outcome="permitted">
<query>galaxy(auditTrail)</query>
<allFunctions/>
</right>
</rights>
</constituents>
<description>FIS role for commands MigrateDocuments</description>
</role>
</ns:createRole>
</soap:Body>
</soap:Envelope>