A Page Group Object Privileges

This appendix describes the privileges required to perform page group related tasks. It contains the following sections:

Required Privileges for Page Group Related Tasks
Page Group Privileges
Page Privileges
Item Privileges

For more information about how security works in OracleAS Portal, see the chapter Securing Oracle Application Server Portal in the Oracle Application Server Portal Configuration Guide.

A.1 Required Privileges for Page Group Related Tasks

Table A-1 describes the minimum privileges you require to perform various actions on page group objects.

Table A-1 Privileges Required to Perform Page Group Related Tasks

To Perform the Following Task	You Need the Following Privileges
View the content of a non-public page	View privilege on the page or on All Pages.
Add a portlet to your own version of a page and hide, show, rearrange, and delete the portlets that you add	Customize (Add-Only) privilege on the page or on All Pages.
Hide, show, and rearrange any portlet on your own version of a page	Customize (Hide-Show) privilege on the page or on All Pages.
Apply a different style to your own version of a page	Customization (Style) privilege on the page or on All Pages. Note: Users can only apply a different style to their own version of a page if the Allow Privileged Users To Customize Page Style page group property is enabled.
Delete a portlet from your own version of a page or move a portlet to a different region on the page	Customize (Full) privilege on the page or on All Pages.
Add content (items and portlets) to the a page without requiring approval, edit item properties, hide, show, rearrange, and delete items	Manage Content privilege on the page or on All Pages.
Add items to a page that require approval before they are visible on the page	Manage Items With Approval privilege on the page or on All Pages. Note: This privilege is available only if approvals and notifications are enabled for the page group.
Apply a different style to a page	If the Allow Privileged Users To Manage Page Style page group property is enabled: Manage Style privilege on the page or on All Pages. If the Allow Privileged Users To Manage Page Style page group property is disabled: Manage All privilege on the page group or on All Page Groups
Create a page	Manage privilege on the parent page or on All Pages.
Edit the properties of a page, delete a page	Manage privilege on the page or on All Pages.
Add, delete, or edit a region	Manage privilege on the page or on All Pages.
Create, delete, or edit a page template	Manage Templates privilege on the page group or on All Page Groups.
Create delete, or edit an attribute, item type, page type, category, or perspective	Manage Classifications privilege on the page group or on All Page Groups.
Create a page group	Create privilege on All Page Groups
Edit the properties of a page group	Manage All privilege on the page group or on All Page Groups
Delete a page group	Manage All privilege on the page group or on All Page Groups

A.2 Page Group Privileges

Table A-2 lists and describes the various page group privileges.

Table A-2 Page Group Privileges

A User or Group with the Following Privilege:	Can:
Manage All	Perform any task within the page group. The Manage All privilege includes all other page group privileges: Manage Classifications, Manage Templates, Manage Styles, and View. A user with this privilege is called the page group administrator.
Manage Classifications	Create, edit, and delete any category, perspective, attribute, custom item type, and custom page type in the page group. A user with this privilege cannot view the pages in this page group unless he or she also has the View privilege.
Manage Templates	Create, edit, and delete any page template in the page group. A user with this privilege cannot view the pages in this page group unless he or she also has the View privilege.
Manage Styles	Create, edit, and delete any style in the page group, and apply a different style to any page in the page group. A user with this privilege can also view any page in the page group.
View	View the content of any page in the page group, and preview any externally published portlet in the page group. A user with this privilege cannot add, remove, show, or hide any content within the pages in the page group.

A.3 Page Privileges

Table A-3 lists and describes the various page privileges.

Table A-3 Page privileges

Privilege	Description
Manage	A user with the Manage privilege can perform any operation on the page. With this privilege you can perform all of the actions listed for the Manage Content privilege (discussed below), as well as control the access and style of the page. Notes: For a user with this privilege to change the style of a page, the Allow Privileged Users To Manage Style option must be selected at the page group level. This allows the user to apply a different style when editing the page. If this option is not selected at the page group level, only users with the Manage All or Manage Styles page group privileges can apply a different style for the page. There is a second option for controlling styles at the page group level called Allow Privileged Users To Customize Page Style. When this option is selected, users with at least the Customization (Style) privilege on a page (described below) can apply a different style when customizing the page. If a page is based on a template, users with this privilege may not be able to control the access and style of the page. There are two options at the template level, Enable Pages To Have Different Access and Enable Pages To Use Different Style, which control whether page designers can specify different access and style settings for the page. These must be selected; otherwise, the page access and style settings cannot be changed by users with this privilege.
Manage Content	A user with the Manage Content privilege can add, edit, hide, show, share, and delete any item, portlet, or tab on the page.
Manage Items With Approval	A user with the Manage Items with Approval privilege can add or edit items on the page, but the changes are published only after the defined approval process is complete. Notes: Users with this privilege cannot add portlets to a page. This privilege is only available if approvals are enabled. If approvals are enabled, but an approval process is not defined, users with this privilege can add, edit, or copy items on the page without approval. This privilege is not available for mobile pages.
Manage Style	A user with the Manage Style privilege can change the style and region properties of the page. Notes: If a page is based on a template, users with this privilege may not be able to control the style of the page. The template level option, Enable Pages To Use Different Style, controls whether page designers can specify different style settings for the page. This option must be selected, otherwise, the page's style settings cannot be changed by users with this privilege. For a user with this privilege to change the style of a page, the Allow Privileged Users To Customize Page Style option must be selected at the page group level. When this option is selected, users with this privilege on a page can apply a different style for the page. This privilege is not available for mobile pages.
Customize Portlets (Full)	A user with the Full Customize Portlets privilege can change the style of the page, add portlets to the page, and delete, move, hide, or show any portlet on the page. Notes: These changes are visible only to the user who made them. For example, if a user with the Full Customize Portlets privilege deletes a portlet from a page, other users will still be able to see that portlet on the page. Likewise, if a user with the Full Customize Portlets privilege adds a portlet to a page, only that user will see the portlet; other users will not. For a user with this privilege to change the style of a page, the Allow Privileged Users To Customize Page Style option must be selected at the page group level. When this option is selected, users with this privilege on a page can apply a different style when customizing the page.
Customize Portlets (Add-Only)	A user with the Add Only Customize Portlets privilege can change the style of the page, add portlets to the page, and remove, hide, or show the portlets that are added. Notes: These changes are visible only to the user who made them. For example, if a user with the Add-Only Customize Portlets privilege adds a portlet to a page, only that user will see the portlet; other users will not. For a user with this privilege to change the style of a page, the Allow Privileged Users To Customize Page Style option must be selected at the page group level. When this option is selected, users with this privilege on a page can apply a different style when customizing the page.
Customize Portlets (Hide-Show)	A user with the Hide-Show Customize Portlets privilege can change the style of the page, and hide, show, or rearrange any portlet on the page. Notes: These changes are visible only to the user who made them. For example, if a user with the Hide-Show Customize Portlets privilege hides a portlet to a page, that portlet is hidden only for that user; other users will still be able to see the portlet. For a user with this privilege to change the style of a page, the Allow Privileged Users To Customize Page Style option must be selected at the page group level. When this option is selected, users with this privilege on a page can apply a different style when customizing the page.
Customization (Style)	A user with the Style Customization privilege can apply a different style to the page. Notes: These changes are visible only to the user who made them. For example, if a user with the Style Customization privilege applies a different style to a page, other users will still see the page with the fonts and colors of the original style. For a user with this privilege to change the style of a page, the Allow Privileged Users To Customize Page Style option must be selected at the page group level. When this option is selected, users with this privilege on a page can apply a different style when customizing the page. If a page is based on a template, users with this privilege may not be able to control the style of the page. The template level option, Enable Pages To Use Different Style, controls whether page designers can specify different style settings for the page. This option must be selected, otherwise, the page's style settings cannot be changed by users with this privilege. This privilege is not available for mobile pages.
View	A user with the View privilege can view the content of the page, but cannot add, remove, show, or hide any of that content.

A.4 Item Privileges

Table A-4 lists and describes the various item privileges that are available when item level security is enabled.

Table A-4 Item Privileges

Item Privileges	Description
Manage	A user with the Manage privilege can view the item, edit the item, delete the item, and grant privileges on the item. Note that the Manage privilege does not allow a user to add sub-items under the item. Only users with the Manage Items With Approval or higher privileges on the page can add sub-items.
Edit	A user with the Edit privilege can view the item, edit the item, and delete the item.
View	A user with the View privilege can view the item only