Home
User Guide
The information contained in this section applies to IBM WebSphere Commerce Version 7.0.0.9 and Feautre Pack 8. The documentation also applies to all subsequent releases and modifications until otherwise indicated in new editions.
Securing
These topics describe the security features of WebSphere Commerce and how to configure these features.
Authorization
WebSphere Commerce views access control or authorization as the process of verifying that users or applications have sufficient authority to access a resource. This section describes the details of several aspects of WebSphere Commerce access control.
Customizing default access control policies
The default access control policies that are provided by WebSphere Commerce address the basic requirements that organizations have for regulating the actions and information available to their users. Often, the default policies can be sufficient for your site's needs. At the same time, the default policies are highly customizable, so that you can tailor them to your own requirements.
Examples: Customizing access control policies using the Organization Administration Console
For all of these examples, it is assumed that a Site Administrator is modifying the policies for Root Organization. Once you step through some of the examples, you will be able to follow the same methodology to make changes not specifically covered here.
Subscribing to policy groups
Use the Organization Administration Console to subscribe an organization to a policy group.

Subscribing to policy groups

Use the Organization Administration Console to subscribe an organization to a policy group.

Procedure

Open the Organization Administration Console.
Select Organizations from the Access Management menu. The Organizations page displays.
Select the organization you want to subscribe to a policy group and click Policy Subscription.
To subscribe the organization to a policy group, from the Available Policy Groups list, select the group that you want the organization to subscribe to and click Add. The group moves from the Available Policy Groups list to the Selected Policy Groups list. To remove a policy group from an organization, from the Selected Policy Groups list, select the group that you want the organization to unsubscribe to and click Remove. Repeat this step for all the policy groups the organization will subscribe or unsubscribe to.
Click OK.