Create claim party and vendor tag permissions in ClaimCenter

About this task

The base application comes with a set of tag permissions that permit a user to create, delete, edit, and view all tags. You can add permissions that control access to tags at a more granular level. This topic shows how to create a set of tag permissions in ClaimCenter.

Note: In this example, you create a set of Vendor tag permissions. These permissions enable a user to see and work with contacts that have only the Vendor tag. If the contact has any other tags, these permission do not enable working with that contact. For example, a user who has a single role with only Vendor tag permissions is not able to work with a contact that has both Claim Party and Vendor tags. You could create a set of tag permissions for Claim Party tags and add them to the role that has the Vendor tag permissions. A user with that role would be able to work with contacts that have both Vendor and Claim Party tags. However, that user would not be able to work with contacts that have both Vendor and Client tags. For more information on the application tags in the base configuration, see ClaimCenter contact subtype and tag permissions.

Procedure

Start Guidewire Studio for ClaimCenter.
At a command prompt, navigate to the ClaimCenter installation folder and enter the following command:
```
gwb studio
```
In the Project window, navigate to configuration > config > Extensions > Typelist.
Double-click SystemPermissionType.etx to open this typelist in an editor.

For each of the following contact permission typecodes, right-click an existing typecode and choose Add new > typecode. Then enter the information for the new typecode.

New Code	Name	Description
`claimpartytagcreate`	Create contact with Claim Party tag	Permission to create a contact with a Claim Party tag
`claimpartytagdelete`	Delete contact with Claim Party tag	Permission to delete a contact with a Claim Party tag
`claimpartytagedit`	Edit contact with Claim Party tag	Permission to edit a contact with a Claim Party tag
`claimpartytagview`	View contact with Claim Party tag	Permission to view a contact with a Claim Party tag
`vendortagcreate`	Create contact with Vendor tag	Permission to create a contact with a Vendor tag
`vendortagdelete`	Delete contact with Vendor tag	Permission to delete a contact with a Vendor tag
`vendortagedit`	Edit contact with Vendor tag	Permission to edit a contact with a Vendor tag
`vendortagview`	View contact with Vendor tag	Permission to view a contact with a Vendor tag

In the Project window, navigate to configuration > config > security and double-click security-config.xml.

Associate the new permissions with a contact tag in the security-config.xml file.

For example, add the new typecodes for the Vendor tag permissions to the ContactPermissions element as follows:

<ContactPermissions>
...
  <ContactTagAccessProfile tag="Vendor">
    <ContactCreatePermission permission="vendortagcreate"/>
    <ContactDeletePermission permission="vendortagdelete"/>
    <ContactEditPermission permission="vendortagedit"/>
    <ContactViewPermission permission="vendortagview"/>
  </ContactTagAccessProfile>
...
</ContactPermissions>

Stop the ClaimCenter server, regenerate the data and security dictionaries, and then restart ClaimCenter, as follows:
1. If ClaimCenter is running, open a command prompt in the ClaimCenter installation folder and then enter the following command:
```
gwb stopServer
```
2. To verify that the new permission are correctly formatted, at a command prompt open in the ClaimCenter installation folder, regenerate the data and security dictionaries:
```
gwb genDataDictionary
```
3. Restart ClaimCenter:
```
gwb runServer
```
Add the new permissions to a user role. For example:
1. Log in to ClaimCenter as a user that has the User Admin role, such as user name su with password gw.
2. Click the Administration tab.
3. Click Users & Security > Roles in the Sidebar.
4. Click Add Role.
  The New Role screen opens.
5. For Name, enter Vendor & Claim Party Tag Admin.
6. For Description, enter Manages contacts with Vendor and Claim Party tags. Requires Clerical role as well.
7. Click Add to add a new permission.
8. Click the new field and choose the Create contact with Vendor tag permission from the drop-down list.
9. Repeat step g and step h for each of the following permissions, substituting the actual permission for Create contact with Vendor tag in step h:
  - Create address book contact
  - Create contact with Claim Party tag
  - Delete address book contact
  - Delete contact with Claim Party tag
  - Delete contact with Vendor tag
  - Edit address book contact
  - Edit contact with Claim Party tag
  - Edit contact with Vendor tag
  - View address book contact
  - View contact with Claim Party tag
  - View contact with Vendor tag
10. Click Update to add the new role.
Remove the anytagview permission from the Clerical role.

Note: Removing this permission is a quick way to test the new Vendor & Claim Party Tag Admin role. However, after this change, users who have only the Clerical role and no other will be unable to view contacts that have tags. For contacts stored in ContactManager, all contacts must have tags, so they would not be visible. For this change to be permanent, another role with anytagview permission would need to be created and then used in conjunction with the Clerical role for all previous Clerical users.
1. Click the Administration tab.
2. Click Users & Security > Roles in the Sidebar.
3. Click Clerical and then click Edit.
4. Click the Code column heading to list anytagview on the first page.
5. Click the check box for anytagview, and then click Remove.
6. Click Update to save your changes.
Create a new user for the role.
1. Click Actions > New User.
  The New User screen opens.
2. For First name, enter Mira.
3. For Last name, enter Nolo.
4. For User name, enter mnolo.
5. For Password and Confirm Password, enter gw.
6. Under Roles, click Add, and then click the Name field. Choose Vendor & Claim Party Tag Admin from the drop-down list.
7. Under Roles, click Add again, and then click the Name field. Choose Clerical from the drop-down list.
8. Under Groups, click Add and then click the Group field. Choose a group from the list, such as the sample data group Eastern Regional Claims Center.
9. Click Update to create the new user.
Log out.

For example, if you logged in as su, on the Options menu , click Log Out Super User.
Log in as mnolo with password gw.
Verify that this user can find contacts with Vendor and Claim Party tags set, or with only one tag or the other set. If necessary, either create those contacts in ContactManager or import ContactManager sample data.
Verify that this user can create, edit, and delete contacts with these tags and have the changes saved in ContactManager without the contacts being made pending.