创建新配置文件

<profiles>
  <profile id="50" _delta="define">
    <name>Read-Only Except Requests</name>
    <description>Users with this profile are allowed to browse through all objects in the application and to create/modify user requests (either through the portal or in the normal application)</description>
    <groups>
      <group id="Portal">
        <actions>
          <action id="write">allow</action>
          <action id="delete">allow</action>
        </actions>
      </group>
      <group id="UserRequest">
        <actions>
          <action id="action:write">allow</action>
          <action id="stimulus:ev_close" xsi:type="stimulus">allow</action>
          <action id="stimulus:ev_reopen" xsi:type="stimulus">allow</action>
        </actions>
      </group>
      <group id="*">
        <actions>
          <action id="action:read">allow</action>
          <action id="action:bulk read">allow</action>
        </actions>
      </group>
    </groups>
  </profile>
  <profile id="51" _delta="define">
    <name>Read-Only No Portal Access</name>
    <description>Users with this profile are allowed to browse through all objects in the application but not to modify anything (even through the portal)</description>
    <groups>
      <group id="*">
        <actions>
          <action id="action:read">allow</action>
          <action id="action:bulk read">allow</action>
        </actions>
      </group>
    </groups>
  </profile>
</profiles>