Skip to main content

Orbeon Setup

Steps to Create an Orbeon App

CWDB

  • Create needed schema and roles for new Orebon app.
-- create user for Orbeon to use
CREATE ROLE orbeon_XXX LOGIN
  NOSUPERUSER INHERIT NOCREATEDB NOCREATEROLE NOREPLICATION;
-- create group for department users
CREATE ROLE XXX_forms
  NOSUPERUSER INHERIT NOCREATEDB NOCREATEROLE NOREPLICATION;
-- create the schema for forms to live in
CREATE SCHEMA orbeon_XXX AUTHORIZATION orbeon_XXX;
-- set the search path for the user Orbeon will be using
ALTER ROLE orbeon_XXX
  SET search_path = orbeon_XXX;
-- grant admin user for campus DB admin access to forms
GRANT USAGE ON SCHEMA orbeon_XXX TO admin_general;
-- grant department users access to forms
GRANT USAGE ON SCHEMA orbeon_XXX TO XXX_forms;
-- grant access to campus DB admin for any additional tables created by admin user
ALTER DEFAULT PRIVILEGES IN SCHEMA orbeon_XXX
    GRANT SELECT ON TABLES
    TO admin_general;
-- grant access to department users for any additional tables created by admin user
ALTER DEFAULT PRIVILEGES IN SCHEMA orbeon_XXX
    GRANT SELECT ON TABLES
    TO XXX_forms;
  • Set password for orbeon_XXX user in PGAdmin.
  • Login: psql -U orbeon_XXX -h database.mlc-wels.edu cwdb
  • Check search path with: show search_path;
  • Grant additional permissions by pasting in SQL statement below as orbeon_XXX user
-- grant access to campus DB admin for any additional tables created by orbeon_XXX user
ALTER DEFAULT PRIVILEGES IN SCHEMA orbeon_XXX
    GRANT SELECT ON TABLES
    TO admin_general;
-- grant access to department users for any additional tables created by orbeon_XXX user
ALTER DEFAULT PRIVILEGES IN SCHEMA orbeon_XXX
    GRANT SELECT ON TABLES
    TO XXX_forms;

OES

  • Create group OrbeonXXX.groups.ac.mlc in iManager

Orbeon Server

  • Alter Orbeon config files in /root/orbeon/config
  • Create database resource in orbeon context.xml
  • Add role assignment in Orbeon form-builder-permissions.xml
  • Add orbeon persistence connection in properties-local.xml
  • Add role to oxf.fr.authentication.container.roles in properties-local.xml
  • Add role name to auth-constraint in web.xml
  • Add role name to security-role in web.xml
  • Check for active orbeon user sessions: http://orbeon.mlc-wels.edu:8080/manager/
  • Re-deploy Orbeon
cd /root/orbeon
bin/deploy.sh war/current_link.war
service tomcat restart
Back to top