"root"/ "default" ACL creating dm_user

Hi,

I'm trying to find out what ACL is used when creating a dm_user, without assigning the default_acl up on cration.

The ACL inheritancein the docbase is FOLDER. So I'm wondering how to find out how the default_acl for the user is chooosen by the system.

I'm using DQL to create the user object.

I would appreciate your help, bacause I have searched for this issue the forum, the internet but did not find anything.

Thanks & Regards

Katarina

Find more posts tagged with

Comments

DCTM_Guru

"The ACL inheritancein the docbase is FOLDER. So I'm wondering how to find out how the default_acl for the user is chooosen by the system."

The Content Server creates a unique ACL object for each user, and gives owner and world the same rights for every user that is created.

Since you have inheritance set FOLDER, the ACL created and is assigned default_acl doesnt really matter.

katarinadp

hello,

thanks for the answer, but I still have follwoing problem:

"The Content Server creates a unique ACL object for each user, and gives owner and world the same rights for every user that is created."

Thats the problem, I wont to know how to prevent the Content Server giving dm_world "Read" rights.

For security reasons our company does not want having ACl created with dm_world "READ" rights. I know that I can prevent it setting the ACL inheritance in the docbase to FOLDER and assigning ACLs(with dm_world NONE) directly. But the user-folders will still have dm_world READ, as I can't find out how they are created. I did not find the anything in the DfACL implementation. So I think that the Content Server uses a "default" ACL as template to create a new one for the user?

Thanks & Regards

Katarina