Search in user context as super user (DFS)

Hi guys,

I have developed a job, which is running with super user permissions, to search documents. This job uses the DFS. So I can find each document, but I need to check if one special user (I know the login name) can read this document. If this user can read this document this user get this document, otherwise he doesn't get it.

Does someone know a solution to realize this scenario? I don’t want to search this user in each ACL, which are assigned to this document….

Thanks.

Find more posts tagged with

Comments

DCTM_Guru

I know in DFC, once you have a superuser session you "assume" another user acct - basically act like if you were that user log into the application. Not sure if this function is in DFS.

abc123

As I know, DFC session assume needs to supply complete login info (username + password), so may not be usable in your case. For your case, even if DFS/DFC has an API helping to check the Permission for a specific user, ACL is still need to be computed.

To have a better performance and less coding, I suggest you to build a custom DFS service, where at server side, you seach all documents and check each documents permssion for a specific user like:

IDfSysObject.getPermitEx (String accessorName)

DCTM_Guru

If you have a superuser session, you dont need to provide a password for the assumed user. You just need to create a ticket for the user using this code:

superUserSession = sessMgr.getSession(repoName);

String userTicket = superUserSession.getLoginTicketForUser(username);

Then use the ticket in lieu of the password for logininfo and logininfo to assume method.