Requirement : In my current project I had the following requirement
XYZ- user-group should have read access on a product "Cable" which is part of a catalog "Cable".
ABC- user group should have read access on the product "Cable" and read/write access on an attribute of Cable - Cable.uploaded.
Cable should be accessible as a folder in the HMC navigation tree.
CableCatalog is similar to product catalog for custom products.
As per the acceptance criteria as a XYZ user i should be able to view Cable and if i have ABC role assigned also then i should be able to check and uncheck the uploaded attribute of Cable.
In order to fulfill the above requirement following steps should be implemented
1. Create an impex say catalog.impex in your respective extension. Give write permissions to user-group ABC on CableCatalog
$cableCatalog=cCableCatalog
UPDATE CatalogVersion;catalog(id)[unique=true];version[unique=true];writePrincipals(uid)
;cableCatalog;Online;ABC
This way all the users having ABC role will have write permissions on all attributes of products in Cable catalog. However as per the acceptance criteria ABC should have write access only to Cable.product attribute .
In order to achieve this perform step 2.
2. In user-group impex grant the access rights on type Cable to XYZ user group.
$START_USERRIGHTS;;;;;;;;;
Type;UID;MemberOfGroups;Password;Target;read;change;create;remove;change_perm
UserGroup;XYZ;;;;;;;
;;;;Cable;+;-;-;-;-
$END_USERRIGHTS;;;;;;;;;
3. Grant write acces rights on Cable.uploaded to ABC user group
$START_USERRIGHTS;;;;;;;;;
Type;UID;MemberOfGroups;Password;Target;read;change;create;remove;change_perm
UserGroup;ABC;;;;;;;
;;;;Cable;+;-;-;-;-
;;;;Cable.uploaded;+;+;-;-;-
$END_USERRIGHTS;;;;;;;;;
In this way ABC will have read acces on type Cable in Cable catalog and write access on Cable.uploaded attribute of type Cable .
It can view all the products of Cable catalog.
Note: Since Cable is a type in CableCatalog it is important to grant permissions on CableCatalog and Cable both.