nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Adding new permission type

HexYevg

Hi all,

That's my first question in this forum

I read a lot about all the permissions/ACLs issue and try to figure out some issues :

1.I understand that there are 7 different access levels that can be assigned to a file. How can I add another custom level of my own?

2.Regarding the extended permission types issue - as an admin , can I add another custom extended permission? If yes, then how can I do it?

Thanks a lot,

HexYevg

Find more posts tagged with

Comments

DCTM_Guru

Custom permissions and custom extended permissions are not supported. What are you trying to do that permissions do not satisfy your requirement? Keep in mind, functionality can be restricted independent of the ACL permissions. This his how roles are used to limit functionality within Documentum application

dnvhariprasad

Unlike other ECM applications like Sharepoint, documentum does not support custom permission levels. What kind of custom permission are you looking for? There are several other alternates depending on clients you are using to come up with complex permissions.

HexYevg

OK, Thanks.

So if I want to add a custom attribute which will be different per user , for a specific document...how can I do that?

DCTM_Guru

You can do that through Composer or Documentum Administrator.

ssonker

Do you want the attribute to vary per user or the value of the attribute?

If you wish to have a different attribute per user, you may have to have multiple custom sub-types of dm_document (or dm_sysobject or whatever) with different attributes per user. Then assign permissions for object types.How many users are you talking about?

HexYevg

10,000 users and higher...

HexYevg

So another question but about "Aspects" -

I see that I can attach a different aspects with different attributes per document type.

Can I assign differnet attribute values per user?

Thanks

VHK

Different object instances of the same persistent type may have different

sets of aspects attached.

HexYevg

I meant about the aspects attributes...In other words suppose I have specific Aspects set for a Custom type of object. For the attributes that are belong to this set - can I assign defifferent values for an atribute per user?

VHK

I think assigning different values for an attribute per user is not possible and the possible scenario would be attaching and dettaching the aspects to the user only.

HexYevg

The problem is that I have a very large amount of users and attaching an aspect per user is quite uncomfortable..are you sure about that?

dnvhariprasad

if you can provide some use case, probably you will get better answer..

DCTM_Guru

Defining different attributes available for various aspects is similar to defining custom attributes for object type for different purposes/situations (eg document management, records management, WCM, etc). However, I dont think this will address your original question about adding "new permission" type.

You still havent described what you are trying to accomplish that the OOTB permission does not satisfy. The permission model is explicity referenced when query for objects, so you wont get back an object in search results if you dont have permissions. Also, certain actions (on an object) are not available to you unless you have correct permissions. Creating a "new" permission would also require you to create all the "supporting" actions to enforce the new permission.

HexYevg

Johnny, regarding aspects and custom attributes - you are correct, they are not useful for my purpose.

I want to extend the permission model, as the OOTB permission is not sufficient for me. I want to add permissions that are specific for a document type that I'm writing.

For example, I'd like to prevent some users from editing certain attributes of a document (i.e. Title), but to still be able to edit other attributes and to edit the document. I have more use-cases, if you'd like me to elaborate.

In order to accomplish that, what I really need is another "extended permission" (i.e. something like "Edit special attributes" in addition to the existing extended permissions), but if this is not possible and there is a way to save an attribute per user for each document, this would be sufficient.

In addition, Johnny, you mentioned that creating a new permission would also require to create supporting actions. Does this mean that you can create a new permission? What does it mean by creating supporting actions?

DCTM_Guru

Which application are you using (eg Webtop, Formsbuilder, custom, etc)? If webtop, you can satisfy your requirement buy modifying the attribute jsp.

"Does this mean that you can create a new permission?"

- No, I was just elaborating that even adding a simple attribute/aspect, it may not address other issues.

riddelln

Your use-case is a common requirement that is usually met by a combination of roles and customising WDK controls (for WDK clients) or custom forms for XCP.

If you want extremely granular control (i.e. very dynamic behaviour based on attribute values) then you could use dynamic groups which are session based - although it would be difficult to do it per user.

Cheers Niall