Adding a User Property to Oracle WebCenter Interaction

Recently I had to create a portal security group for director level and above employees. Our HR system feeds Active Directory a field containing each persons grade. Based on the grade it is possible to determine which users should be included in the security group. All I needed to do was add a property for grade to the user profile, populate it, and create a group with dynamic memberships based on the contents of the new property.

Oracle WebCenter Interaction Security

One of the strengths of the WebCenter Interaction (WCI) portal is extremely granular security.  Every WCI portal object has security.  This can also create a maintenance nightmare when security needs change.  It is difficult to remember all of the objects that need to be updated.  If you change a page and forget the portlets it doesn't work very well.  Likewise, a user can have access to a snapshot query portlet but if they don't have access to the objects being queried they would see an empty portlet.  It reminds me of the saying, with great power comes great pain-in-the-tush.