Report on Objects that a Group has permissions

We use groups to provide access to folders rather than individual users. This has necessitated a requirement to offer a report that will display all folders and docs that a group (should be able to input the group) has permissions. Eg. Group name HR_EMP. Report should be like:Folders Permissions===== =======Folder 1 see contentsFolder 2 see contents/modifyThe user wants a report of all folders with permissions that HR_EMP has in the system. If anyone has a LiveReport achieving the above, would you please share it with us.Wilson

Find more posts tagged with

Comments

Chris_Jones

Message from Jones, Christopher L. \(IT\) via eLinkEDMS ADMIN,You can build this report by linking the following 3 tables together:DTreeKUAFDTreeACLAnd hard code the values into the report:36995 See, See Contents102531 See, See Contents, Modify Thank you,Chris -----Original Message-----From: eLink Discussion: Livelink LiveReports Discussion[mailto:livereportsdiscussion@elinkkc.opentext.com] Sent: Friday, January 13, 2006 7:11 AMTo: eLink RecipientSubject: Report on Objects that a Group has permissionsReport on Objects that a Group has permissions Posted by EDMS ADMIN, DPCon 01/13/2006 08:10 AMWe use groups to provide access to folders rather than individual users.This has necessitated a requirement to offer a report that will displayall folders and docs that a group (should be able to input the group)has permissions. Eg. Group name HR_EMP. Report should be like:Folders Permissions===== =======Folder 1 see contentsFolder 2 see contents/modifyThe user wants a report of all folders with permissions that HR_EMP hasin the system. If anyone has a LiveReport achieving the above, wouldyou please share it with us.Wilson[To reply to this thread, use your normal E-mail reply function.]============================================================Discussion: Livelink LiveReports Discussionhttps://knowledge.opentext.com/knowledge/livelink.exe/open/2249677Livelink Server:https://knowledge.opentext.com/knowledge/livelink.exeTo Unsubscribe from this Discussion, send an e-mail tounsubscribe.livereportsdiscussion@elinkkc.opentext.com.

eLink User

Message from Nair, Krishnankutty N. via eLinkBut wouldn't that calculation go wrong on basis of nested permissionsWhat you want is very easy you basically declAre a number for yourfolder in your levereportAnd give a number of rows or do this using a adhoc tool select a.DATAID "DtreeACL also in dtree ",a.RIGHTID "Who in livelink can see me",a.PERMISSIONS "Permission Bitmask",b.NAME "livelink userid",b.TYPE "Am I a group or a user",b.DELETED "Am Ideleted" from dtreeacl a ,kuaf bwhere a.dataid=47551146 and a.acltype=0and a.RIGHTID=b.IDDtreeACL also in dtree ~Who in livelink can see me~Permission Bitmask~livelink userid~Am I a group or a user~Am I deleted47551146~45197364~36995~ConocoPhillips-LLExplorerGroup~1~0Look at the PERMISSIONS(bit mask representation) and what that means inenglish or when you Look at the permissions on a object.SEE=130SEE,SEE contents=36995SEE,SEE CONTENTS,MODIFY=102531SEE,SEE CONTENTS,MODIFY,EDIT ATTRIBUTES=233603SEE,SEE CONTENTS,MODIFY,EDIT ATTRIBUTES,ADD ITEMS=233607SEE,SEE CONTENTS,MODIFY,EDIT ATTRIBUTES,ADD ITEMS,RESERVE=241799SEE,SEE CONTENTS,MODIFY,EDIT ATTRIBUTES,ADD ITEMS,RESERVE,DELETEVERSIONS=258183SEE,SEE CONTENTS,MODIFY,EDIT ATTRIBUTES,ADD ITEMS,RESERVE,DELETEVERSIONS,DELETE=258191SEE,SEE CONTENTS,MODIFY,EDIT ATTRIBUTES,ADD ITEMS,RESERVE,DELETEVERSIONS,DELETE,EDIT PERMISSIONS=258207THE BITMATH IS THE COMMONLY USED THINGS THAT YOU SEE IN THE GUI.USINGEXCEL VBA OR ORACLEYOU CAN TRANSLATE THE BITMATH ACCURATELY.AN EARLIER POSTING BY MOHSINJESSA IN THIS DISCUSSION GROUP DOES THAT.THE HARD CODING WILL NOT CATCHALL PERMUTATIONS/COMBINATIONS . I will also tell you why this information is useless.This is finding allthe rows in dtreeaclThat is explicitly defined for an object.Livelink uses nestedpermissions('A' group may be made of 'B and 'C',so and when you define'A' with view rights to an object,many more people are actuallyaccessing the object).There is oscript code that livelink uses to dothat.-----Original Message-----From: eLink Discussion: Livelink LiveReports Discussion[mailto:livereportsdiscussion@elinkkc.opentext.com] Sent: Friday, January 13, 2006 7:11 AMTo: eLink RecipientSubject: Report on Objects that a Group has permissionsReport on Objects that a Group has permissionsPosted by EDMS ADMIN, DPC on 01/13/2006 08:10 AMWe use groups to provide access to folders rather than individual users.This has necessitated a requirement to offer a report that will displayall folders and docs that a group (should be able to input the group)has permissions. Eg. Group name HR_EMP. Report should be like:Folders Permissions===== =======Folder 1 see contentsFolder 2 see contents/modifyThe user wants a report of all folders with permissions that HR_EMP hasin the system. If anyone has a LiveReport achieving the above, wouldyou please share it with us.Wilson[To reply to this thread, use your normal E-mail reply function.]============================================================Discussion: Livelink LiveReports Discussionhttps://knowledge.opentext.com/knowledge/livelink.exe/open/2249677Livelink Server:https://knowledge.opentext.com/knowledge/livelink.exeTo Unsubscribe from this Discussion, send an e-mail tounsubscribe.livereportsdiscussion@elinkkc.opentext.com.

Steve_McDonough

The following SQL will allow you to view the folder permissions within an entered group (you will need the KuafId of the group in order to run the report). SELECT A.DATAID "Folder ID", D3.NAME "Regional Folder", D2.NAME "Folder Location", D1.NAME "Folder Name", CASE A.RIGHTID WHEN '-1' THEN 'Public Access' WHEN '-2' THEN 'System Administrators' ELSE 'Group ID: ' + STR(A.RIGHTID) END [Privileges Assigned To], CASE A.Permissions WHEN 128 THEN 'No Rights' WHEN 130 THEN 'S' WHEN 36995 THEN 'S/SC' WHEN 36999 THEN 'S/SC/AI' WHEN 62666 THEN 'S/M' WHEN 65670 THEN 'S/M/AI' WHEN 102531 THEN 'S/SC/M' WHEN 102535 THEN 'S/SC/M/AI' WHEN 102547 THEN 'S/SC/M/EP' WHEN 102551 THEN 'S/SC/M/EP/AI' WHEN 118915 THEN 'S/SC/M/DV' WHEN 118919 THEN 'S/SC/M/AI/DV' WHEN 118923 THEN 'S/SC/M/DV/D' WHEN 118927 THEN 'S/SC/M/AI/DV/D' WHEN 118931 THEN 'S/SC/M/EP/DV' WHEN 118939 THEN 'S/SC/M/EP/DV/D' WHEN 118935 THEN 'S/SC/M/EP/AI/DV' WHEN 118943 THEN 'S/SC/M/DP/AI/DV/D' WHEN 127107 THEN 'S/SC/M/DV/R' WHEN 127111 THEN 'S/SC/M/AI/DV/R' WHEN 127115 THEN 'S/SC/M/DV/D/R' WHEN 127119 THEN 'S/SC/M/AI/DV/D/R' WHEN 127123 THEN 'S/SC/M/EP/DV/R' WHEN 127127 THEN 'S/SC/M/EP/AI/DV/R' WHEN 127131 THEN 'S/SC/M/EP/DV/D/R' WHEN 127135 THEN 'S/SC/M/EP/AI/DV/D/R' WHEN 233603 THEN 'S/SC/M/EA' WHEN 233607 THEN 'S/SC/M/EA/AI' WHEN 233619 THEN 'S/SC/M/EP/EA' WHEN 233623 THEN 'S/SC/M/EP/EA/AI' WHEN 249987 THEN 'S/SC/M/EA/DV' WHEN 249991 THEN 'S/SC/M/EA/AI/DV' WHEN 249995 THEN 'S/SC/M/EA/DV/D' WHEN 249999 THEN 'S/SC/M/EA/AI/DV/D' WHEN 250003 THEN 'S/SC/M/EP/EA/DV' WHEN 250007 THEN 'S/SC/M/EP/EA/AI/DV' WHEN 250011 THEN 'S/SC/M/EP/EA/DV/D' WHEN 250015 THEN 'S/SC/M/EP/EA/AI/DV/D' WHEN 258179 THEN 'S/SC/M/EA/DV/R' WHEN 258183 THEN 'S/SC/M/EA/AI/DV/R' WHEN 258187 THEN 'S/SC/M/EA/DV/D/R' WHEN 258191 THEN 'S/SC/M/EA/AI/DV/D/R' WHEN 258195 THEN 'S/SC/M/EP/EA/DV/R' WHEN 258199 THEN 'S/SC/M/EP/EA/AI/DV/R' WHEN 258203 THEN 'S/SC/M/EP/EA/DV/D/R' WHEN 258207 THEN 'Full Permissions' WHEN 16777215 THEN 'Admin' ELSE 'New: ' + STR(A.Permissions) END Permissions, K.NAME "Group" FROM DTREE D1, DTREE D2, DTREE D3, DTREEACL A, KUAF K WHERE A.DATAID = D1.DATAID AND D1.PARENTID = D2.DATAID AND D2.PARENTID = D3.DATAID AND A.ACLTYPE = 0 AND D1.SUBTYPE = 0 AND K.ID = A.RIGHTID AND D2.NAME <> 'CUSTOMVIEW.HTML' AND A.RIGHTID = %1 ORDER BY D3.NAME, D2.NAME, D1.NAMEInput Type : String Input Prompt : Input GroupParam %1 : User Input 1Report Format : Auto LiveReportThe report will only show the folder level permissions and not the documents within. You can modify the SQL so that it doesn't limit the report to DTree Subtypes to folders (0) only.We're running MS SQL, Windows 2000 and Livelink 9.5.0.1.Hope that this helps,Leon

Khalid_Omar

Wish ours were SQL, but it is Oracle and the syntax don't work from a LiveReport. Looks like your syntax will yeild the results that I am looking for. Anyone has an Oracle equal???

Developers_Comparex_Africa_(x-comparexdevelopment_

I have found the attached LiveReport in a previous discussion which is an Oracle version.

Khalid_Omar

Thanks, but this report pulls out items of a container. What we want is to be able to select a GROUP instead of Container and report all items that the selected GROUP has permissions to.

Sachiko_Izawa_(pmuser21(expired))

I am also looking for a similar LiveReport so I can see what objects have set permissions to a specific group.Thank You,Sachiko Izawa.

eLink User

Message from Nair, Krishnankutty N. via eLinkSee if this suits your purpose(Theoretically not very accurate,does nottake into accountThat a livelink group can consist of groups and groups and ....)Query is written for oracle and tested on 9.5 sp1-----Original Message-----From: eLink Discussion: Livelink LiveReports Discussion[mailto:livereportsdiscussion@elinkkc.opentext.com] Sent: Tuesday, January 31, 2006 9:20 AMTo: eLink RecipientSubject: ANYBODY ELSE WHO CAN HELP?ANYBODY ELSE WHO CAN HELP?Posted by Izawa, Sachiko on 01/31/2006 10:16 AMI am also looking for a similar LiveReport so I can see what objectshave set permissions to a specific group.Thank You,Sachiko Izawa.[To reply to this thread, use your normal E-mail reply function.]============================================================Topic: Report on Objects that a Group has permissionshttps://knowledge.opentext.com/knowledge/livelink.exe/open/4461418Discussion: Livelink LiveReports Discussionhttps://knowledge.opentext.com/knowledge/livelink.exe/open/2249677Livelink Server:https://knowledge.opentext.com/knowledge/livelink.exeTo Unsubscribe from this Discussion, send an e-mail tounsubscribe.livereportsdiscussion@elinkkc.opentext.com.

Scott_Wallace

The report was good but try this. Get your DBA to create a function called GETLLPATH using the following script.CREATE FUNCTION GETLLPATH(objectid IN NUMBER) RETURN VARCHAR2 IS dir VARCHAR2(32767); obj_id NUMBER; CURSOR Name_Cursor IS SELECT A.NAME, A.PARENTID FROM DTREE A WHERE A.DATAID = obj_id; name Name_Cursor%rowtype; BEGIN dir := NULL;obj_id := objectid; LOOP OPEN Name_Cursor; FETCH Name_Cursor INTO name; EXIT WHEN Name_Cursor%NOTFOUND or name.NAME = 'Enterprise'; IF dir IS NOT NULL THEN dir := (name.NAME || ':' || dir) ; END IF; IF dir IS NULL THEN dir := name.NAME; END IF; obj_id := name.PARENTID; CLOSE Name_Cursor; END LOOP; return(dir);END;/Then edit the first part of the sql in the "Pass me a [GroupID] and I will show you all the folders this group can see"Instead of select b.dataid use select getllpath(b.dataid)