How can we provide a single user read only access to all the cabinets

We have one request where we need to provide a user read only access to all the cabinets and also all the folders under the cabinets including the documents.

Thanks in Advance

Find more posts tagged with

Documentum

Comments

lastnitescurry

Create group super_world_read_all
Add user to group
Add group to all permission sets

AnupritaSapate

Thanks Brian.

But as there are several permission sets, how are we going to add the groups in those permissions set.

dnvhariprasad

Add the user to dm_read_all (OOTB group) which provides read access to all the sys objects in the repository irrespective of ACL and permissions

AnupritaSapate

Thanks Hari,

Can you please tell me some more information about this group dm_read_all?

And also i think so it depends upon the client compatibility.It is applied to only user who's client compatibility is Consumer.Is it true?

In our case users are populated from LDAP and the default user compatibility is set to Contributor.

Can you please let me know how can we move ahead with this?

DCTM_Guru

Client capability is used to show functionality in Webtop. Even though Edit might be available to user (b/c the user is contributor role), if the user only has READ permissions on document, then he/she cant edit the document.

AnupritaSapate

Thanks Johny.

You mean to say that the if the user is contributor then, user can change the role to Consumer?

DCTM_Guru

No. I was trying to address your concern of "...And also i think so it depends upon the client compatibility.It is applied to only user who's client compatibility is Consumer.Is it true?"

If you follow the suggestion made by multiple people about changing the ACLs to give the user only READ permissions, it does NOT matter whether their client capability is Contributor or not.

BTW - you may get better/faster responses if you post your question in the Documentum Support Forums:

AnupritaSapate

Yes Johny, i tried creating a user with 'Consumer' Compatibility and adding 'dm_read_all' to that user. I were able to view all the cabinets. And also i tried to add dm_read_all to user with Contributor compatibility and i were not able to see any cabinet.

But yes for migration we wanted a user who have read only access on all the cabinets.So we created a inline user and added dm_read_all to that user which had consumer Compatibility.

Thanks a lot Johny,Hari and Brian for your thoughts.

These are very helpful.Something new is learnt.