The following post-deployment tasks pertain to the Assure DQ product. After you complete the tasks in this section, proceed to Perform Common Post-deployment Tasks.
Configure the default security profile
Security profiles control which groups and users can access and modify reusable rules, as well as control definitions, control data, results, and reports for individual control entities and applications.
For new installations, you can modify the default "permit nobody"
profile created at installation time. If you prefer, you can import an existing profile
from another instance of Assure DQ. A third option is to import the
"permit everyone" profile shipped with the system.
For instructions on how to replace or modify the default security profile, see the following sections:
- Import the Permit Everyone Default Profile
- Import an Existing Profile
- Modify the Default Profile
Import the permit everyone default profile
If appropriate, you can import a permit everyone profile to replace
the default permit nobody profile created at installation time for new
installations. The IA Default Permit Everyone profile grants all
permissions to all users.
You can import the permit everyone profile from the user interface (see below) or from the command line (see Import from the Command Line).
Import with the User Interface
Import from the Command Line
If you prefer, you can use the systemimportexport.bat or
systemimportexport.sh command line utility to import the Permit
Everyone profile. The default location for the utility is
<install_folder>/Infogix/server-util/<myConfigName>/IA.
The syntax for the utility is shown below:
systemimportexport [-import or -export] –file <zipfilename> [-username <username> -password <password>] [-proxyusername <proxyusername> -proxypassword <proxypassword>]
-
-importImports the profile from the ZIP file specified by the-fileoption. -
-fileSpecifies the full path (on UNIX) and the name of the ZIP file containing the profile to export or import. -
-proxyusernameUser ID to connect to HTTP proxy server (optional).
| Parameter | Description |
|---|---|
| -import | Imports the profile from the ZIP file specified by the -file option. |
| -export | Exports the ZIP file specified by the -file option. |
| -file | Specifies the full path (on UNIX) and the name of the ZIP file containing the profile to export or import. |
| -username | User ID to connect to http server (optional). |
| -password | User password to connect to http server (optional). |
| -proxypassword | User password to connect to http proxy server (optional). |
| -proxyusername | User ID to connect to http proxy server (optional). |
To import IA Default Permit Everyone.zip, enter a command similar to
one of the following examples:
Windows:
systemimportexport -import -file <install_folder>\Infogix\db\IA\data\security\IA Default Permit Everyone.zip
UNIX/Linux:
./systemimportexport.sh -import -file /usr/websph1/<install_folder>/Infogix/db/IA/data/security/IA Default Permit Everyone.zip
Import an existing profile
To replace the default permit nobody profile with an existing
profile, export the profile of your choice from an existing Assure DQ
instance. Then, import the profile into your new Assure DQ instance.
Export a profile
You can export an existing profile to use as the default in a new instance of Assure DQ. The export function creates a ZIP file for import into other instances of Assure DQ. To export a profile with the user interface, complete the following steps:
- Log in to the user interface as a Security Administrator or Superuser.
- Select the profile to export.
- Click Export.
- When prompted, specify that you want to save the profile file.
- Specify a name and path for the ZIP file and click Save.
- When the Download Complete window displays, click Close.
Import a profile
To import an existing profile to use as the default in a new instance of Assure DQ, complete the following steps:
- Complete the procedure above for exporting a profile.
- Log in to the new instance of Assure DQ as a Security Administrator or Superuser.
-
The system displays the Security Profiles window.
- Click Import.
- Click Browse and navigate to the ZIP file to import. The ZIP file is the one created in the export procedure.
- Select the file and click Open.
- Click Open to see the directory and profile dependencies
for the profile, if any. Note: Directory dependencies consist of users and groups that do not exist in the target environment but are granted permissions by the profile.Note: Profile dependencies are other profiles that do not exist in the target environment that the current profile includes.
- To proceed with the import, click Import.
- Select the profile you just imported.
- In the bottom pane on the Details tab, note the ID of the profile.
DEFAULT_SECURITY_PROFILE_ID property in the
IA.properties file in
<install_folder>/Infogix/config/<myConfigName>/IA.
Then, run the update-config script in
<install_folder>/Infogix/bin to change the default profile.
Modify the default profile
If you import the Permit Everyone profile shipped with Assure DQ,
you may need to modify the profile to better match your security requirements. You can
also modify the default permit nobody profile created at installation
time if you do not want to import a profile.
To modify the default profile, complete the following steps:
- Log in to the Assure DQ user interface as a Security Administrator or Superuser.
-
The system displays the Security Profiles window. The top pane lists all existing profiles.
- In the top pane, pick the Assure DQ Default Profile
(profile ID 1) or the default profile for your installation.
The ID of the default profile is specified by the
DEFAULT_SECURITYPROFILE_IDproperty in theIA.propertiesconfiguration file. - In the bottom pane, click the Permissions tab.
- To grant a permission to all users, select the permission and click Permit Everyone, if the option is available.
- To grant a permission to specific groups and users, select the permission and click Edit Groups and Users.
- In the top pane, select any users and groups to delete and click Remove.
- In the bottom pane, select any users and groups to add and click Apply. Use the Type filter to toggle the list to show groups or users. To filter the list, use the Keyword and Filter By options and click Search.
- Click OK to return to the previous window.
Load example controls
The populate-example-db script loads the following control examples
into the database:
- Acme Promotions
- Sample File Transfer Process
- Sample Payments Process
To load the examples, complete the following steps:
- Open
<install_folder>/Infogix/binand run the following script:For Windows:
populate-example-db.bat -c <myConfigName> IAFor UNIX or Linux:
./populate-example-db.sh -c <myConfigName> IA - Open
<install_folder>/Infogix/logs/<myConfigName>/IA/clientand review the<host_name>-igx.logfile to verify that the script ran successfully.
appserver.properties file. For more information, see the
Properties Guide. If you have completed all post-deployment tasks that are specific to Assure DQ, proceed to Perform Common Post-deployment Tasks.