nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Folder ACL versus Object type ACL

athati

Hi,

I have set up FOLDER ACL in our test environment, so that any document of our custom type is created automatically that ACL is applied to that document.

See the follwoing DQL Results:

DQL: select default_acl from dm_server_config
Result: 1

We need to push this into production. Do you think it forces all ACLS to be FOLDER ACLs? If yes, can I have object type ACL by setting default ACL to 2? Does it work? My requirement is I need to apply an ACL to my custom type so that when ever a new document of that type is created.

default_acl integer S Specifies which ACL the server will use asthe default ACL when creating a new objectif an ACL is not explicitly associated withthe object. Valid values are:• 1, to specify the ACL associated with theobject’s primary folder• 2, to specify the ACL associated with theobject’s type• 3, to specify the ACL associated with theuser who created the object• 4, meaning no default ACL is specifiedThe default is 3.

Please share your knowledge and experience to resolve this issue.

Thanks.

Find more posts tagged with

Note:

If there are Accepted Answers, those will be shown by default. You can switch to 'All Replies' by selecting the tab below.

Button

Accepted answers

DCTM_Guru

"... new document of that type is created."

- Are you talking about importing a new document or File->New->Document? If the latter, you might be able to assign the ACL on the document template and this might propagate when the copy is created. If you are talking about import, then Rijo suggestion is correct.

All comments

XdctmX

If the user is not assigning one explicitly with a useACL method then the server will automatically assign folder / user / type acl based on the value in the default_acl property of the server’s server config object. So in your case it will be folder ACL. If you want that to be type ACL then you have to change the default_acl value of dm_server_config

DCTM_Guru

Before you change this setting, please read my blog entry on the cons of using inherit from TYPE:

https://johnnygee.wordpress.com/2006/09/29/inherit-from-who/

If you want to go down this path, you may have to restart the content server in order for the setting to take affect. I personally have never been in a situation where I used this setting. Too many problems with defining correct ACL for ALL object types.

athati

Thanks Rijo.

I understand what you say. Currently I have an ACL attached to a cabinet/folder and an ACL attached to the cabinet. With FOLDER ACL automatically the attached ACL will be applied to the documents created under that cabinet. It is working fine.

If I change the FOLDER ACL to TYPE ACL by setting dafault_acl of Server Config object to 2. What next I need to do? Again my requirement is I need to apply an ACL to my custom type so that when ever a new document of that type is created.

Please give me the steps I need to do.

Thanks.

athati

Thanks Johnny.

Again my requirement is I need to apply an ACL to my custom type so that when ever a new document of that type is created. I am not assigning this FOLDER ACL to all document types in production. I need to apply to only one specific type right now.

Currently I see default_acl = 3 for the Server Config object of our production docbase.

To achieve my requirement without disturbing my current production environment, what exactly I need to do? How can achieve my goal?

Please advise me.

Thanks.

XdctmX

Create a type based business object to assign this acl up on creation.

DCTM_Guru

"... new document of that type is created."

lastnitescurry

athati wrote:
Currently I see default_acl = 3 for the Server Config object of our production docbase.

athati wrote:
To achieve my requirement without disturbing my current production environment, what exactly I need to do? How can achieve my goal?

Is it just me that thinks the orginal question was stupid!

athati

Thanks Johnny.

I am talking about "new document or File->New->Document". I applied the ACL to the document Template and changed Default ACL back to '3' (USER ACL-ACL associated with the user who created the object) . I bounced Tomcat and also docbase/docbroker. The ACL applied to the Template is not propagated to the newly created document (File->New->Document). Am I missing anything?

Please advise me.

Thanks.

DCTM_Guru

I said "might". I presume the ACL inherited is coming from USER.

athati

Thanks Johnny.

I assigned the same ACL to the usre as well as the Template. As I changed Server Config object to have USER ACL as the default ACL, I got what I needed.

Thank you very much for your help.

athati

Thanks Rijo.

The issue is resolved with User ACL and therefore we did not go for TBO. In fact, we already coded TBO, but we think ACL is the better option. What do you say?

Thank you verymuch for your help.

DCTM_Guru

You said "...my requirement is I need to apply an ACL to my custom type so that when ever a new document of that type is created." The presumption is that you have a different ACL for different types.

If thats the case, I dont see how using USER ACL will solve your issue. The same ACL will be assigned to ALL object instances/types created by the users. There is no differentiation.

TBO allows you to define specific business logic for each object type.