nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to import user permissions with xmlimport?

Dimitar_Belyovski_(NETBRI012_(Delete)_2516594)

I used xmlexport to create a xml file as my future import source file, after that I delete all the current items under Enterprise workspace and started to recreate the same folder structure using xmlimport with the xml source file. The folder structure has been rebuilt as it used to be, but I found the user permission of the folder had not been updated, it was back to it's default setting as the folder was newly created.I checked the xml file, the user permission details was correct.Why xmlimport can't import the user permnission details properly? Does anybody can give me an answer?Thanks

Find more posts tagged with

Comments

Maurizio_Giglio

After a deep investigation, I've discovered there is a bug in the XML Import: only name users permissions are correctly reimported. Group based permissions, Public Access and permissions on Project Groups (Cood, Member & Guest) are skipped!I've produced an UNOFFICIAL patch that seems to solve the problem.I hope this help youEnricoPS: request this patch to e.papalini@idtech.it

Hans_Giger

This works per spec and is documented in the Livelink Release Notes for Livelink 9.1 SP1. See Application Notes Nr. 93:When an item is created in Livelink by XML Import, the default permissions (Owner, Owner Group,Public) are inherited from the container being imported into. Livelink also applies the ACL list that in theimported object's XML data, so that they will get the same permissions as on the imported object - even ifthey would have more permissions by inheriting from the target container. Users NOT listed in theimported object's ACL list will inherit permissions from the target container. (1761426)

Eugene_Ochkurov

If you don't know objid for the function xmlexport how did you export the list of users?

Kyle_Swidrovich

What do you know about the object?

Eugene_Ochkurov

I'm trying to understand.

For example, to extract data from the "Workspace" we use function:

... /livelink.exe?func=ll&objId=2000&objAction=xmlexport&scope= ...

than I can imort this data:

... /livelink.exe?func=admin.xmlimport&filename=c:\livelink.xml&objID=2000

How can i use this functionality for Livelink "Users and Groups"

Kyle_Swidrovich

Hi Eugene,

Your original post indicated user “permissions”, which are access control lists on nodes in Content Server.

Your most recent post indicates “Users and Groups” which is quite different from what was noted originally.

Could you please clarify what you’re trying to do?

Thanks,

Kyle

Eugene_Ochkurov

Ok, I see
Thank you so much

I'm just trying to understand is it possible to use this functionality (xmlimport/xmlexport) for the objects "users and groups" in livelink.

Kevin_Bailey

If I understand your request correctly, youcannot use xmlexport/xmlimport to export users and groups (e.g. data in the kuaf table). I assume you are not talking about ACL's on objects, showing the user and groups permissions, which of course you can do with xmlexport/xmlimport.

You can directly query the kuaf (and kuafchildren) tables for this info, which would give you users, groups, nesting's of users in groups, and nesting's of groups in groups. There are some LAPI apps that can allow you to export these things also.

From: eLink Entry: LAPI Forum [mailto:lapi@elinkkc.opentext.com]
Sent: Thursday, August 02, 2012 12:11 AM
To: eLink Recipient
Subject: RE RE How to import user permissions with xmlimport?

RE RE How to import user permissions with xmlimport?

Posted bye.ochkurov@sibcon-soft.ru (Ochkurov, Eugene) On 08-02-2012 00:04

Ok, I see
Thank you so much

I'm just trying to understand is it possible to use this functionality (xmlimport/xmlexport) for the objects "users and groups" in livelink.

[To post a comment, use the normal reply function]
Topic:	How to import user permissions with xmlimport?
Forum:	LAPI Forum
Content Server:	Knowledge Center

Petr_Jezek

Hello!

I have similar issue. I have imported user groups from Active Directory via OTDS into my test system running into CS10 SP2 update 11 and the same groups are imported into production system.

I understand that OTDS and CS during consolidation can't create users/groups in both systems with the same IDs. When I export folder structure (a lot of folders with quite a lot of groups, no documents in it) with permissions I see that only group names are included (as those IDs are unique for each system anyway). When I tried to import it several times into my target system (production) import never ends, no folders are created and no import error file is generated. When I do the same w/o exporting permissions folders are imported.

I saw that this discusison started with LL version 9.1 is it still the issue that groups permisions are not imported in version 10?

Thanks,

Petr

Thomas_John

Is there any patch related issue?

I performed the same via

func=ll&objAction=XMLExport&objid=2000&scope=1&permissios&nodeinfo

After importing the xml via

func=admin.xmlimport&filename=livelink.xml&objid=3456

Folder is created without permission i.e. no group which had assigned access?

Anyone has solution for this

Appu_Nair1

I am leaning towards Pilot ErrorJ

Look at an xmlexport do you not see the permissions in the XML file with magic numbers also there is a typo in your syntax

?func=ll&objAction=XMLExport&objid=273219&scope=1&permissions&nodeinfo

What does this mean?

On import it will try to apply the group based on itsIDnotName.

If you import this on the same server as your original server it will work because chances are those ID’s can be resolved. If you transform the XML to mapped ID’s in the target system using a ascii editor it will work.

If you have Object Exporter(OE) and Object Importer(OI) name based transfers will work.

From: eLink Entry: LAPI Forum [mailto:lapi@elinkkc.opentext.com]
Sent: Wednesday, May 06, 2015 6:45 AM
To: eLink Recipient
Subject: [EXTERNAL]RE RE RE How to import user permissions with xmlimport?

RE RE RE How to import user permissions with xmlimport?

Posted byjohn.thomas@vvolve.com (Thomas, John) On 05/06/2015 07:37 AM

Is there any patch related issue?

I performed the same via

func=ll&objAction=XMLExport&objid=2000&scope=1&permissios&nodeinfo

After importing the xml via

func=admin.xmlimport&filename=livelink.xml&objid=3456

Folder is created without permission i.e. no group which had assigned access?

Anyone has solution for this

[To post a comment, use the normal reply function]
Topic:	How to import user permissions with xmlimport?
Forum:	LAPI Forum
Content Server:	Knowledge Center

image001.jpg

Thomas_John

Thanks Appu.

Changed the RightID also did not apply the assigned group permission.

Even,tried to check whether it will work on the same server. That is also did not work.

Do not know what is the root cause.

Any suggestion?

Appu_Nair1

What version of livelink I will run it and see if something changed I only have 971 and 10.5 currently at work.

From: eLink Entry: LAPI Forum [mailto:lapi@elinkkc.opentext.com]
Sent: Wednesday, May 06, 2015 7:41 AM
To: eLink Recipient
Subject: [EXTERNAL]RE RE RE RE How to import user permissions with xmlimport?

RE RE RE RE How to import user permissions with xmlimport?

Posted byjohn.thomas@vvolve.com (Thomas, John) On 05/06/2015 08:37 AM

Thanks Appu.

Changed the RightID also did not apply the assigned group permission.

Even,tried to check whether it will work on the same server. That is also did not work.

Do not know what is the root cause.

Any suggestion?

[To post a comment, use the normal reply function]
Topic:	How to import user permissions with xmlimport?
Forum:	LAPI Forum
Content Server:	Knowledge Center

Thomas_John

Version:CS10.5-Update 2014-09

livelink1.xml

Appu_Nair1

When I tried none of my simple attempts worked so I looked at the “bible”

https://knowledge.opentext.com/knowledge/cs.dll?func=ll&objaction=overview&objid=10186663

It was said one could use

?func=ll&objId=271096&objAction=XMLExport&scope=1&permissions&nodeinfo&extuserinfo

I got my XML I removed the Permissions Tag Changed stuff around in my extuserinfo and it obeyed

</extuserinfo>

The Original NODE	Target Node

That’s as much I can do without digging into code but I had thought that xmlimport would honor manipulation of ACL’s now I am not sure anymore.

From: eLink Entry: LAPI Forum [mailto:lapi@elinkkc.opentext.com]
Sent: Wednesday, May 06, 2015 8:03 AM
To: eLink Recipient
Subject: [EXTERNAL]RE RE RE RE RE How to import user permissions with xmlimport?

[Attachments exceeded pre-set size limits. Use the links provided to access]

RE RE RE RE RE How to import user permissions with xmlimport?

Posted byjohn.thomas@vvolve.com (Thomas, John) On 05/06/2015 08:59 AM

Version:CS10.5-Update 2014-09

Attachment Links:

livelink1.xml (4 KB)

[To post a comment, use the normal reply function]
Topic:	How to import user permissions with xmlimport?
Forum:	LAPI Forum
Content Server:	Knowledge Center

image001.png

image002.png

Appu_Nair1

I will say this for your benefit if you are a oscripter.In my eclipse when I run the file I can see it doing this

Core::XML::PermissionsHandler::CreateACLs inthat Oscript there is a flag called

Boolean inheritPermissions

The call comes to the script and it is TRUE.If you change it to FALSE (Logically you are saying I do not want Permissions Inheritance) it will work like it used to work that means the calls to set ACL's according to the ACL in the XML.I think this was how it used to behave.

So to make your life easier you can look into lapi methods and see if it allows any keys to say inheritpermissions = true/false.I did not see anything obvious

My earlier post is wrong in because it looks to me that extuserinfo is meant to be used in DOMAIN ENABLED LIVELINK SERVERS which probably nobody now remembers so I would not use any that OT does not document correctly.

Hopefully some of this info helps

Thomas_John

Thank you Appu

Appu_Nair1

Hi John,I am thinking you need to ask through support if this is correct as per their spec?The reason is I see with this code you can only change Owner,Group ,PA.Could it be intentional? I would suspect that a admin would never know what the content of the file is? so what if a rogue user wanted to get control to a hierarchy where they say inheritance should be obeyed? I plan to look at 971 code,10 code and see if it always has been like this.All in my own time.Usually release notes should indicate if things have changed between versions and justifications.Was this lapi code new or something that you know that has worked before?There is a lot of new dev in the xml stuff because it is corner stone of their transport mechanism under the covers so the code could have been re visted for all I know.