Revoke a user from all the ACLs in which user is present

anju2911

Hi

I want to remove a user from all the ACLs in which the user is present am trying to do it through a DQL(to get list of all the ACLs in which user is present) and a set of API commands(to revoke the access)

The below DQL
Select object_name from dm_acl wherer_accessor_name='username'
and the API commands
retrieve,c,dm_acl where object_name = 'ACLnameFrom Above Query'
revoke,c,l,username
save,c,l
this is working fine manually
I want to implement the same or list of users via DFC code Can anyone please help me how to write the set of API commands in DFC code ?

Jeremy Saumen

Hi,

This code should work :

import java.text.MessageFormat;
import java.util.ArrayList;
import java.util.List;

import com.documentum.com.DfClientX;
import com.documentum.com.IDfClientX;
import com.documentum.fc.client.DfQuery;
import com.documentum.fc.client.IDfACL;
import com.documentum.fc.client.IDfClient;
import com.documentum.fc.client.IDfCollection;
import com.documentum.fc.client.IDfPermit;
import com.documentum.fc.client.IDfQuery;
import com.documentum.fc.client.IDfSession;
import com.documentum.fc.client.IDfSessionManager;
import com.documentum.fc.common.DfLoginInfo;
import com.documentum.fc.common.IDfId;
import com.documentum.fc.common.IDfList;

public class RevokePermit {
     public static void main(String[] args) {
          try {
               final String userToRevoke = "username";
               final String login = "dmadmin";
               final String password = "dmadmim";
               final String repository = "MyRepo";

               IDfClientX clientx = new DfClientX();
               IDfClient client = clientx.getLocalClient();
               IDfSessionManager sMgr = client.newSessionManager();
               sMgr.setIdentity(repository, new DfLoginInfo(login, password));
               IDfSession dfSession = sMgr.getSession(repository);
               try {
                    List<IDfId> list = new ArrayList<IDfId>();
                    IDfQuery dfQuery = new DfQuery("SELECT r_object_id FROM dm_acl WHERE ANY r_accessor_name = '" + userToRevoke + "'");
                    IDfCollection dfCollection = dfQuery.execute(dfSession, IDfQuery.DF_READ_QUERY);
                    try {
                         while (dfCollection.next()) {
                              list.add(dfCollection.getId("r_object_id"));
                         }
                    } finally {
                         dfCollection.close();
                    }

                    boolean transaction = false;
                    boolean noError = false;
                    try {
                         if (!dfSession.isTransactionActive()) {
                              dfSession.beginTrans();
                              transaction = true;
                         }

                         for (IDfId dfId : list) {
                              IDfACL dfACL = (IDfACL) dfSession.getObject(dfId);
                              IDfList dfList = dfACL.getPermissions();
                              for (int i = 0, cpt = dfList.getCount(); i < cpt; i++) {
                                   IDfPermit dfPermit = (IDfPermit) dfList.get(i);
                                   if (dfPermit.getAccessorName().equals(userToRevoke)) {
                                        System.out.println(MessageFormat.format("removing permission {0} from {1} for {2}", dfPermit.getPermitValueString(), dfACL.getObjectName(), userToRevoke));
                                        dfACL.revokePermit(dfPermit);
                                   }
                              }
                              dfACL.save();
                         }
                         noError = true;
                    } finally {
                         if (transaction) {
                              if (noError) {
                                   dfSession.commitTrans();
                              } else {
                                   dfSession.abortTrans();
                              }
                         }
                    }
               } finally {
                    sMgr.release(dfSession);
               }
          } catch (Throwable e) {
               e.printStackTrace();
          }
     }
}