MPORTANT NOTE: Running the PORTAL_CSS can bring back different results each time. It does not perform any deletes, however, it seems to be adding a few rows each time instead of all at once. This is fixed in PeopleTools 8.48
Note: It is recommended to clear the appserver, webserver, and process scheduler caches before running the PORTAL_CSS
1) Navigate to PeopleTools > Portal > Portal Security Sync
2) Create a NEW run control as long as it does not already exist. The issue is that you cannot use a run control with the same name that could run another AE process. So it must be unique for the Portal Security Synch process.
2a) You can also fix the issue, by moving the PeopleCode in PORTAL_CSS_RUN.PORTAL_NAME.FieldDefault to PORTAL_CSS_RUN.PORTAL_NAME.RowInit. Until this is fixed in PT 8.48.
3) Choose the Portal name (i.e. EMPLOYEE, SUPPLIER, etc.)
4) If you chose the option to delete invalid security you will have to also run the process again without checking that option. Note that all this checkbox does is remove PeopleSoft delivered invalid objects. It does NOT delete ALL invalid security.
5) Click Run
NOTE: If you get an error when trying to run this like the following: PSAESRV.3868 (3) [02/16/05 10:44:16 RSMADMIN@FWDPSDEV02 RunAeAsync1](2) PrdmGet failed with error code 3, portal name
Error getting portal . (96,5) Unable to open portal. PortalName = (95,307)
You will need to create a new run control to get this to work.
Here are the directions for running the Portal Security Synch Application Engine PORTAL_CSS program
Content reference and folder permissions can get out of sync when you move content references and folders from one or more databases to another using the Project Copy feature in Application Designer. When you merge projects, and if the projects have any of the same folder object names, then the permission lists of the last project copied are added and overwrite the permission lists of the folders copied earlier.
Understanding Portal Security Synchronization
The Portal Security Synchronization page provides options for you to perform clean up and synchronize content reference permissions and folder permissions by enabling you to execute the Application Engine program PORTAL_CSS from the standard menu navigation.
1) Navigate to PeopleTools > Portal > Portal Security Sync
2) Create a NEW run control as long as it does not already exist. The issue is that you cannot use a run control with the same name that could run another AE process. So it must be unique for the Portal Security Synch process.
2a) You can also fix the issue, by moving the PeopleCode in PORTAL_CSS_RUN.PORTAL_NAME.FieldDefault to PORTAL_CSS_RUN.PORTAL_NAME.RowInit. Until this is fixed in PT 8.48.
3) Choose the Portal name (i.e. EMPLOYEE, SUPPLIER, etc.)
4) If you chose the option to delete invalid security you will have to also run the process again without checking that option. Note that all this checkbox does is remove PeopleSoft delivered invalid objects. It does NOT delete ALL invalid security.
5) Click Run
NOTE: If you get an error when trying to run this like the following: PSAESRV.3868 (3) [02/16/05 10:44:16 RSMADMIN@FWDPSDEV02 RunAeAsync1](2) PrdmGet failed with error code 3, portal name
Error getting portal . (96,5) Unable to open portal. PortalName = (95,307)
You will need to create a new run control to get this to work.
Here are the directions for running the Portal Security Synch Application Engine PORTAL_CSS program
Content reference and folder permissions can get out of sync when you move content references and folders from one or more databases to another using the Project Copy feature in Application Designer. When you merge projects, and if the projects have any of the same folder object names, then the permission lists of the last project copied are added and overwrite the permission lists of the folders copied earlier.
Understanding Portal Security Synchronization
The Portal Security Synchronization page provides options for you to perform clean up and synchronize content reference permissions and folder permissions by enabling you to execute the Application Engine program PORTAL_CSS from the standard menu navigation.
PORTAL_CSS will always populate Permission Lists to folders if there is ANY child Cref that has the Permission List in it. Navigate to Peopletools >Portal >Structure and Content. Make sure that this permission list is not added in any cref or subfolders related to the navigation you are trying to remove it from . Once removed running PORTAL_CSS should not re-grant that permission list the page access.
NOTE: The Portal Security Synch process ONLY needs to be run after an upgrade or when migrating security from one database to another. This process does NOT need to be run all the time or be setup as a process to run weekly or monthly. If your database security does not change very often then running this process all the time, is a waste of time.
NOTE: When running the Portal Security Synchronization there should be no other users in the system. Database tables may be locked during this process. This process will take from a few minutes to a few hours, depending upon the volume of the portal data. The User ID, that invokes this process, must have the security role Portal Administrator, or PeopleSoft Administrator otherwise the process will fail. Some errors might be "Not Authorized..." for the CREFs when you look this information up in the log files of when the Application Engine is run.
NOTE: When running the PORTAL_CSS you may get error messages about the some processes failing on certain portal objects in your log file like the example below. This is just an example; your list may be different.
NOTE: It is also important to delete the Application Server and Process Scheduler cache before and after running this process. The Portals involved have very complex relationship with each other, and some changes in running this process may cause versioning to be out of sync. It is important to do this each time the program is run.
No permissions in PSAUTHITEM for Object xxx
There is nothing to worry about here, this is just a warming message and can be ignored. If you want to clean up these warning messages please see Document:621806.1 "PT 8.44: Receiving 'No Permission' error messages in the logs with PORTAL_CSS" for more information.
Enhancement Request:
No permissions in PSAUTHITEM for Object xxx
There is nothing to worry about here, this is just a warming message and can be ignored. If you want to clean up these warning messages please see Document:621806.1 "PT 8.44: Receiving 'No Permission' error messages in the logs with PORTAL_CSS" for more information.
Enhancement Request:
Ice report 1919908000 - "PORTAL_CSS process Needs it own role or PTPT1300 needs tools access removed" has been created as an enhancement request and is being looked at for a future tools release.
Please note: For PT 8.50, this process is run exactly the same way as identified above. When doing an upgrade, it is good to run it with the "Delete Invalid Security" option enabled.
