IBM WebSphere V5.0 Security - CGISecurity

RoleCos Naming CreateCos Naming DeleteDescriptionUsers who have been assigned theCosNamingCreate role will be allowed tocreate new objects in the Name Spacethrough such operations as JNDIcreateSubcontext, and performCosNamingWrite operations. Thespecial-subject AllAuthenticated is thedefault policy for this role.Users who have been assignedCosNamingDelete role will be able todestroy objects in the Name Space, forexample using the JNDIdestroySubcontext method, as well asperform CosNamingCreate operations.The special-subject AllAuthenticated isthe default policy for this role.Note: The CosNaming roles are effective only when Global Security isenabled.Mapping a user to a CosNaming roleThe process of mapping a user to a CosNaming role is the same as for mappingusers to the admin role. The difference is that you have to navigate toEnvironment -> Naming -> CORBA Naming Service Users from the SecurityCenter. The roles that you can apply to a user are also different.Figure 10-5 CosNaming Role to user mappingChapter 10. Administering WebSphere security 243