20120720 curbing user access to their openam profile - plembo/onemoretech GitHub Wiki

title: Curbing user access to their OpenAM profile link: https://onemoretech.wordpress.com/2012/07/20/curbing-user-access-to-their-openam-profile/ author: lembobro description: post_id: 3091 created: 2012/07/20 17:21:13 created_gmt: 2012/07/20 21:21:13 comment_status: closed post_name: curbing-user-access-to-their-openam-profile status: publish post_type: post

Curbing user access to their OpenAM profile

Just a short note on an easy way to keep users from editing their own OpenAM profile should they go directly into the console. Basically the trick here is to set the "any" parameter in the iPlanetAMUserService schema to "adminDisplay" for every attribute you want to prevent users from changing. This not only prevents them from editing the field, but actually removes the field from the profile page. Since we have a separate apps for user self-service and administration I've gone and set all of the fields this way except for the password change related ones. Look at my previous article on Custom attributes and OpenAM headers for how to change the service schema.