About the RuleSet Maintenance wizard

Moving a RuleSet

To move a RuleSet, select an existing RuleSet and specify a target name and, optionally, a version. The wizard processes the source rules in each RuleSet Version in the RuleSet and any non-versioned rules associated with the RuleSet. The RuleSet and RuleSet Version fields of each rule are updated to the values specified as the target. The result is that the rule appears to have been deleted from its source RuleSet and copied into the target RuleSet. The value of the rule's pzInsKey does not change.

The handling of multiple RuleSet Versions in the RuleSet depends on whether you specify a target version:

• If you move a RuleSet without specifying a target version, the wizard preserves the structure and contents of the source RuleSet's versions under the Target RuleSet.
• If you move a RuleSet and specify a target version, RuleSet Versions in the source RuleSet are merged by skimming the rules to the specified version under the Target RuleSet. That is, the highest-versioned instance of each rule in the source RuleSet versions is moved to the target RuleSet and specified RuleSet Version.

For example, if you move a RuleSet containing rules with RuleSet versions 01-01-01, 01-01-02 and 01-01-03 into a new target RuleSet and specify a version of 01-02-01, the target RuleSet version will contain the highest version of all the source rules contained in versions 01-01-01, 01-01-02 and 01-01-03 with lower-versioned duplicates dropped. In this example, if a rule is duplicated in both 01-01-01 and 01-01-02, the rule will be moved from 01-01-02 to the new RuleSet name with RuleSet Version 01-02-01, and the duplicate rule in 01-01-01 will be dropped.

When you move a RuleSet, the wizard also updates the references to affected RuleSet versions in the following rules or data instances anywhere in the system, so they reference correctly the versions that exist after the move:

Rule-Obj-Class Rule-Access-Deny-Obj Rule-Access-Role-Name Rule-Access-Role-Obj Rule-Application-Requirement Rule-Application

Rule-Application-UseCase Rule-Connect-BPEL Rule-Declare-Pages Rule-RuleSet-Name Rule-RuleSet-Version

You cannot copy a RuleSet.

Copying or Moving a RuleSet Version

Copying a RuleSet Version performs the same function as the Save As toolbar action. The original source RuleSet Version does not change. Each target rule that is created is identical to the original source rule with the following exceptions:

1. You must specify a RuleSet Version for the target rules that is different than that of the source rules.
2. The wizard creates a new pzInsKey field value for the target rules using the actual create date/time as one of the values in the construction the new target pzInsKey. The create date/time value is the only difference between the data that makes up the source and target pzInsKey values.

As with moving a RuleSet, moving a RuleSet Version changes the source rules. The wizard updates the RuleSet Version fields of each Rule to the values specified as the target. The result is that the rule appears to have been deleted from its source RuleSet Version, and copied into the target RuleSet Version. In a move, the value of the rule's pzInsKey does not change.

Merging RuleSets and RuleSet Versions

You can merge multiple source RuleSet Versions belonging to the same or different RuleSets. For example, you can "skim" the RuleSet by collecting only the highest version of every rule in the RuleSet Versions into the target, or you can compress the RuleSets down to a lower level (01-01-01) or another designated level. You control the merge by specifying the target version and the order in which the RuleSet versions will be processed.

When you select the RuleSet Versions, you establish the order of precedence by the order in which you list them in the wizard interface. The wizard processes the rules in the order listed, top-to-bottom, collects the first version of every rule it finds, and drops other duplicate rules:

• The wizard first processes rules from the first RuleSet Version listed, and then discards duplicate rules in the following versions in the list.
• Then the wizard processes any remaining rules in the second RuleSet Version in the list, dropping any that are duplicates of what it has already processes.
• Processing continues in the same way down the list of versions.

Compress RuleSets with prerequisites beginning with the RuleSet of least dependency. For example, if RuleSet A requires RuleSet B as a prerequisite, and RuleSet B requires RuleSet C as a prerequisite, then you should compress the RuleSet A first, then B, and finally C. If you compress the RuleSets in the order C, B, and A, you risk losing some rules that you expected to retain.

When you merge RuleSets or RuleSet Versions, you have the option of deleting the sources once the merge is complete. However, if you merge RuleSet versions and opt to delete the sources, the source versions are deleted, but not their RuleSet(s).

For an example of the merge operation, see PDN article 25974 How to merge RuleSets using the RuleSet Maintenance wizard.

Changing a RuleSet Version number

You can change the version number for a particular RuleSet Version, whether or not the version which you designate as the new number already exists. The target version belongs to the same RuleSet as the source version. All rules, including non-resolved rules, from the source RuleSet Version become part of the target version. All rules retain their original pzInsKey values, and therefore retain their History.

When the change is complete, the wizard deletes all rules in the source version.

Rule Conflicts

For move, copy, and change operations, you can specify how to handle conflicts if the same rules are found in both the source and the target. You can choose to overwrite the target rules with the source rules, or to not move or copy the source rules that conflict, leaving the target rules unchanged. If you choose not to overwrite the rules, the Summary page of the wizard lists the rules in the source that were skipped because they were in conflict with the target.

Locked RuleSet Versions

The wizard does not change rules that belong to locked RuleSet versions. If a RuleSet version that will be changed by the wizard operation is locked, you are prompted for the password to unlock the Version before proceeding. To copy a RuleSet Version the target rules cannot be locked. The source rules can be locked, since they are not changed by the copy operation. To move a RuleSet or RuleSet Version, both the source and target rules must be unlocked.

Checked Out Rules

As a best practice, make sure that all rules are checked in before you move or copy a RuleSet or RuleSet Version. Select > Application > Development > Checked Out Rules. Complete the parameters and click Run. Review the resulting report to confirm that no rules from that RuleSet version are checked out.

If the wizard encounters rules to be modified that are checked out, it displays a warning page and provides a report of the checked-out rules. From the report window you can open the rules and check in the ones for which you have permission, or save a list of the rules in a spreadsheet.

You must check in any rules you have checked out or arrange for any rules in the report that are checked out by other users to be checked in before you can complete the wizard. If you exit the wizard to arrange for rules to be checked in, you must restart the wizard from the beginning.

Affected Rules and Data Instances

The wizard automatically adjusts any references to RuleSet versions in the following rules or data instances, system wide, to match the versions that exist after a merge or move:

• RuleSet Versions  ( “prerequisite”  field)
• Rule-Application   (lists on the General tab)
• Organization data instance (listing RuleSet versions here is possible,  deprecated)
• Access group data instances

Before running the RuleSet Maintenance wizard, consider the following guidelines:

• Back up your PRPC system before performing operations with this wizard.
• You can only copy or move RuleSets or RuleSet Versions that are in your RuleSet List.
• Make sure the rules that will be modified by the operation you specify are unlocked and checked in. As described above, the wizard will warn you if it encounters locked or checked-out rules during the copy or move, but it is a best practice to make sure that all the rules you will operate on are unlocked and checked in before running the wizard.

When you are working with RuleSet Versions, the Copy missing RuleSet Prerequisites check box appears at the bottom of the first form of the wizard. Check this check box to have the wizard copy any prerequisite RuleSets that the RuleSet version that results from your process will require.

Select >System> Tools > Refactor RuleSets > Copy/Move/Merge RuleSet to start the wizard. Then select the operation you wish to execute.

For help in completing the first form, see RuleSet Maintenance wizard.

Recommended next steps

This wizard does not modify references to RuleSets that are deleted or modified. Repair any references to rules that have been moved by the wizard by replacing references to the source RuleSet with the target or another RuleSet. In particular,

• If a RuleSet to be moved is referenced in an application rule, be sure to update the references on the application rule form:

  - Application RuleSets section on the General tab

  - Component and Shared RuleSets section on the General tab

  - Production RuleSets section on the General tab

• Update any references to the old RuleSet in Access Groups, including the local customization section on the Settings tab.

Recovering merged RuleSets

Before merging the RuleSets, the tool creates a backup of each rule named Bkup_SourceRuleSet.zip and Bkup_TargetRuleSet.zip. If needed, you can use the Import ZIP facilities to recover the original RuleSets.

Logging

Each execution of this wizard creates an instance of the Log-Merge-RuleSet class, including error messages or other results. The key to this instance is the date and time the wizard was started.

Notes

Class rules do not have a version. Do not delete Class rules (or other rules that have no version) if any version of the RuleSet remains in use.

In some organizations, audit or compliance policies may prohibit deleting old rules, even if they are not in use.