Report on a User and Permissions

Is there a way to select a user from Livelink and run a report to see what he or she has access to within the system?Thank you

Find more posts tagged with

Comments

eLink User

Message from Marie Lindsay <<A HREF="mailto:marie@opentext.com">marie@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">eLink

I haven't seen any replies to this one yet, so I'll give you my vague answer: This is a fairly difficult task, because Livelink controls access using groups as well as users. One user might be a member of 20 groups, each of which is a sub-group of a few other groups, and this makes it difficult to follow through the system. The SQL would be pretty complex.

-----Original Message-----
From: knowledge@opentext.com [mailto:knowledge@opentext.com]On Behalf Of eLink Discussion: Livelink LiveReports Discussion
Sent: Friday, March 29, 2002 10:38 AM
To: eLink Recipient
Subject: Report on a User and Permissions

Report on a User and Permissions Posted by GenDUser11 (C4 Systems, General Dynamics) on 03/29/2002 11:34 AM

Is there a way to select a user from Livelink and run a report to see what he or she has access to within the system?

Thank you

General_Dynamics_IT

Hi Marie,Do you know if this has been done before? This seems like a complex task to me, but I'm not a SQL expert. Do you think it would be possible to write a livereport that found all items a user has permissions to and created a sub-report that would then find the specific permissions for that object under a "details" link?Thanks.

eLink User

Message from Marie Lindsay <<A HREF="mailto:marie@opentext.com">marie@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">eLink

Let's see... Off the top of my head, it seems like you could, but it's definitely beyond my level of expertise:

You could query KUAFRightsList to see all the groups of which the user is a member.
You could query for all of those groups in DTreeACL to locate all places where the user or one of her groups is on a permissions list.
You could translate the bitmask of the returned permissions records to determine just what permissions that user/group has on an item.
You'd also have to determine whether the user has "public access" privilege and if so, include all the DTreeACL records for Public (where ACLType = 3).

I would definitely agree that this is a complex task. In the new Advanced Schema and LiveReports course, we touch on all of these things, but even then, it would take a seasoned SQL writer to make it work.

-----Original Message-----
From: eLink Discussion: Livelink LiveReports Discussion [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: Thursday, June 27, 2002 9:29 AM
To: eLink Recipient
Subject: Report on a User and Permissions

Report on a User and Permissions Posted by GenDUser6 (Network Systems, General Dynamics) on 06/27/2002 10:26 AM
In reply to: RE Report on a User and Permissions Posted by eLink on 04/01/2002 12:43 PM

Hi Marie,

Do you know if this has been done before? This seems like a complex task to me, but I'm not a SQL expert. Do you think it would be possible to write a livereport that found all items a user has permissions to and created a sub-report that would then find the specific permissions for that object under a "details" link?

Thanks.

Johann_Lazarus_(sglcadmin13_-_(deleted))

Hi !This is some realy complicated. How often do you need this ?We made somethink, because we need to make an permission check each month to be save, that our external user are not able to see an file they are not allowed to (for example move makes problems).We had an MSSQL Database and the SQL-Statements must be made directly in the SQL-Query on an copied database. And this need some time depending on the size of the Database.Even there is a smaler Livereports where you can see the rights in an project:INPUT: Project / ProjectSQL:SELECT DTree_1.Name AS [Vor-Item-Name],DTree.Name AS [Item-Name], CASE DTreeACL.Permissions WHEN 128 THEN 'none' WHEN 130 THEN 'see' WHEN 36995 THEN 'see/see content' WHEN 36999 THEN 'see/see content/add items' WHEN 102531 THEN 'see/see content/modify' WHEN 102535 THEN 'see/see content/modify/add item' WHEN 127107 THEN 'see/see content/modify/delete version/reserve' WHEN 127111 THEN 'see/see content/modify/add item/delete version/reserve' WHEN 233623 THEN 'see/see content/modify/edit attributes' WHEN 258179 THEN 'see/see content/modify/add items/delete version/reserve' WHEN 258179 THEN 'see/see content/modify/edit attributes/delete version/reserve' WHEN 258183 THEN 'see/see content/modify/edit attributes/add items/delete version/reserve' WHEN 258191 THEN 'see/see content/modify/edit attributes/add items/delete version/delete/reserve' WHEN 258199 THEN 'see/see content/modify/edit/permision/edit attributes/add items/delete version/reserve' WHEN 258203 THEN 'see/see content/modify/edit permision/edit attributes/delete version/delete/reserve' WHEN 258207 THEN 'see/see content/modify/edit permision/edit attributes/add items/delete version/delete/reserve' WHEN 16777215 THEN 'Admin' ELSE 'New: ' + STR(DTreeACL.Permissions) END Rechte, KUAF.Name as Username_Projektrolle FROM DTreeACL INNER JOIN DTree ON DTreeACL.DataID = DTree.DataID INNER JOIN KUAF ON DTreeACL.RightID = KUAF.ID INNER JOIN DTree DTree_1 ON DTree.ParentID = DTree_1.DataID WHERE (DTreeACL.OwnerID = %1) AND (DTreeACL.ACLType = 0) AND (DTreeACL.ParentID <> - 1) AND (DTreeACL.Permissions <> 128) and dtree.subtype=0 and kuaf.deleted=0 and %2 ORDER BY kuaf.name, DTree.NamePARAM %1: User Input 1PARAM %2: Filter PermissionsREPORT FORMAT: Auto LivereportIf you need more informations: marco.wallig@siemens.com