Allow Codar service to be run as non-administrator user on Windows

When running Codar on Windows, by default, the Codar service is run as the service user. This section explains how to configure Codar so that the Codar service can be run by non-administrator users. This process involves the following tasks:

• Create non-administrator users

• Configure Codar service

• Configure file system permissions for non-administrator users

Create non-administrator users

The following example shows how to create two non-administrator user accounts, one for the Codar service to run as and the other for the HPE Marketplace Portal service to run as. Alternatively, but not documented, you may also create a single non-administrator user to run as for both services.

1. Log in as the Administrator.

2. Start the Control Panel on the Codar system and click Add or remove user accounts that is under User Accounts.

3. Click Create a new account in the Manage Accounts window that appears.

4. Enter a name for the user, select the Standard user radio button if it is not selected, and then click the Create Account button to create the user account.

   Create a user account: CodarUser.

Configure Codar service

1. Log in as the Administrator.

2. Stop Codar, see Stop Codar.

   To stop Codar on Windows, complete the following steps:

   1. On the server that hosts Codar, navigate to Start > Administrative Tools > Services.

   2. Right-click on the Codar service and select Stop.

   3. Right-click on the Codar Execution Service service and select Stop.

   4. If you installed an embedded Operations Orchestration instance, right-click on the Operations Orchestration Central service and select Stop.

       

   To stop Codar on Linux, complete the following steps:

   1. Type the following command on the server that hosts Codar:

      service codar stop

   2. If you installed an embedded Operations Orchestration instance, as the root user, type:

      <embeddedOOinstallation>/central/bin/central stop.

      For example, type /usr/local/hpe/codar/OO/central/bin/central stop

3. Back up and then delete the log files in the CSA_HOME\jboss-as\standalone\log\ directory.

4. Delete all files in the CSA_HOME\jboss-as\standalone\tmp\ directory.

5. Configure the Codar service to be run as CodarUser:

   1. Navigate to Start > Administrative Tools > Services.

   2. Right-click on the Codar service and select Properties.

   3. Select the Log On tab.

   4. Select This account.

   5. In the first field, enter CodarUser.
   6. Enter the password for CodarUser, confirm the password, and click OK.

Configure file system permissions for non-administrator users

Assign permissions to each user for the specified directories in the Codar file system.

1. Log in as the Administrator.

2. Open the File Explorer.

3. For each of the directories listed in the following table, do the following (where C:\Program Files\HPE\Codar is the directory in which Codar has been installed):

   1. Right-click on the directory and select Properties.
   2. Click the Security tab.
   3. Click Edit.
   4. Select a user (CodarUser) and select the permissions listed in the table.
   5. Click OK to exit the Permissions dialog.
   6. Click OK to exit the Properties dialog.

   Directory	User(s)	Allowed Permission(s)
   C:\	CodarUser	Full Control Modify Read & execute List folder contents Read Write
   C:\Program Files\HPE	CodarUser	Full Control Modify Read & execute List folder contents Read Write
   C:\Program Files\HPE\Codar\	CodarUser	Full Control Modify Read & execute List folder contents Read Write
   C:\Program Files\HPE\Codar\Autopass	CodarUser	Full Control Read
   C:\Program Files\HPE\Codar\boss-as	CodarUser	Read
   C:\Program Files\HPE\Codar\jboss-as\bin	CodarUser	Write
   C:\Program Files\HPE\Codar\ CONTENT_IMPORT_LOGS	CodarUser	Write
   C:\Program Files\HPE\Codar\jboss‑as\standalone	CodarUser	Write
   C:\Program Files\HPE\Codar\jboss‑as\ standalone\deployments	CodarUser	Modify Read & execute List folder contents Read Write
   C:\Program Files\HPE\Codar\jboss‑as\ standalone\configuration	CodarUser	Modify Read & execute List folder contents Read Write
   C:\Program Files\HPE\Codar\openjre* *This is the JRE used by Codar. If you are using a different JRE, set the permissions to that JRE's directory.	CodarUser	Read & execute List folder contents Read Write
   C:\Program Files\HPE\Codar\scripts	CodarUser	Read
   C:\Program Files\HPE\Codar\security	CodarUser	Read
   C:\Program Files\HPE\Codar\Tools	CodarUser	Read

4. Start Codar, see Start Codar.

5. Examine the CSA_HOME\jboss-as\standalone\log\server.log file and verify the changes deployed correctly.