nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

LiveReport to check who has what rights (sys admin, user admin etc)

ken.buckman

How to create a LiveReport by which I can find out who has one or more of following rights?Log-in enabled Public Access enabled Can create/modify users Can create/modify groups User administration rights System administration rights Most importantly, we need to find out the users who have last two (of above listed) rights.

Find more posts tagged with

Comments

Jeff_Brown_(G*_ECM_Champ)

Greg Griffiths has a great LiveReport that exports user data and a Excel spreadsheet that decodes the results into a nice report that does all of this. Thanks to Greg for providing this as I used it yesterday.http://www.greggriffiths.org/livelink/addons/permissionsdecoder/

Steve_McDonough

Here's a report that I use to view privileges:select LLUser.LastName+', '+LLUser.FirstName as [User Name], LLUser.name as [UserID], Department.Name as [Department], (CASE WHEN (LLUser.UserPrivileges/1) %% 2 = 1 then 'Yes' else ' ' END) As [Login enabled], (CASE WHEN (LLUser.UserPrivileges/2048) %% 2 = 1 then 'Yes' else ' ' END) As [Public Access], (CASE WHEN (LLUser.UserPrivileges/32) %% 2 = 1 then 'Yes' else ' ' END) As [Create Users], (CASE WHEN (LLUser.UserPrivileges/64) %% 2 = 1 then 'Yes' else ' ' END) As [Create Groups], (CASE WHEN (LLUser.UserPrivileges/16) %% 2 = 1 then 'Yes' else ' ' END) As [User Admin], (CASE WHEN (LLUser.UserPrivileges/256) %% 2 = 1 then 'Yes' else ' ' END) As [System Admin] FROM kuaf LLUser INNER JOIN kuaf Department ON LLUser.GroupID = Department.ID WHERE LLUser.Deleted = 0 AND LLUser.ID NOT IN (1000) ORDER BY Department.Name, [User Name]The report excludes the Sys Admin login (LLUser.ID NOT IN (1000) and you can add to this argument if you use eLink or MeetingZone, etc.The report is in Auto LiveReport format.Hope it helpsLeon

Steve_McDonough

John,I missed the second part of your question regarding masking out only those that have User and System admin rights. To do this using my report you would need to add the following criteria:AND ( ((convert(int,(LLUser.UserPrivileges/16)) %% 2)=1) OR ((convert(int,(LLUser.UserPrivileges/256)) %% 2)=1) ) Here's the entire syntax to the report:select LLUser.LastName+', '+LLUser.FirstName as [User Name], LLUser.name as [UserID], Department.Name as [Department], (CASE WHEN (LLUser.UserPrivileges/1) %% 2 = 1 then 'Yes' else ' ' END) As [Login enabled], (CASE WHEN (LLUser.UserPrivileges/2048) %% 2 = 1 then 'Yes' else ' ' END) As [Public Access], (CASE WHEN (LLUser.UserPrivileges/32) %% 2 = 1 then 'Yes' else ' ' END) As [Create Users], (CASE WHEN (LLUser.UserPrivileges/64) %% 2 = 1 then 'Yes' else ' ' END) As [Create Groups], (CASE WHEN (LLUser.UserPrivileges/16) %% 2 = 1 then 'Yes' else ' ' END) As [User Admin], (CASE WHEN (LLUser.UserPrivileges/256) %% 2 = 1 then 'Yes' else ' ' END) As [System Admin] FROM kuaf LLUser INNER JOIN kuaf Department ON LLUser.GroupID = Department.ID WHERE LLUser.Deleted = 0 AND LLUser.ID NOT IN (1000) AND ( ((convert(int,(LLUser.UserPrivileges/16)) %% 2)=1) OR ((convert(int,(LLUser.UserPrivileges/256)) %% 2)=1) ) ORDER BY Department.Name, [User Name]Good luck,Leon

ken.buckman

I am trying to run this query but get errors like ---------------------Error in SELECT clause: expression near '%'.Missing FROM clause.Error in SELECT clause: expression near '('.Unable to parse query text.---------------------------I am also wondering where the table departmet is coming from? Is it one of your custom tables?

Steve_McDonough

Hello John,I don't have any custom tables. Department comes from the Inner Join to the Kuaf table using the GroupID to extract the name.We use a MS SQL database here- are you using Oracle?Rather than try ti figure whether there is a spacing error in the syntax or a typing error, here's an export of the report. You can import it from the Admin page and give it a try.Leon

Lindsay_Davies

Message from Lindsay Davies <ldavies@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">RE I am trying to run this query but get errors

Hi Leon,

You have in your SQL statement some occurrences of double percentage signs.

For example CASE WHEN (LLUser.UserPrivileges/1) %% 2 = 1 then

In Livereport processing, this is how you pass a single percentage - which you might want to do for a LIKE condition.

I am not sure what you mean to have... but it is not what you are ending up executing.

Regards,

Lindsay

UK-Support

Open Text

From: eLink Discussion: Livelink LiveReports Discussion [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: Mon 09/04/2007 18:09
To: eLink Recipient
Subject: RE I am trying to run this query but get errors

RE I am trying to run this query but get errors
Posted by Kish, Leon S on 04/09/2007 01:06 PM

Hello John,

I don't have any custom tables. Department comes from the Inner Join to the Kuaf table using the GroupID to extract the name.

We use a MS SQL database here- are you using Oracle?

Rather than try ti figure whether there is a spacing error in the syntax or a typing error, here's an export of the report. You can import it from the Admin page and give it a try.

Leon

[To reply to this thread, use your normal E-mail reply function.]

============================================================

Attachment link: LiveReport(User_Privileges).rpt
https://knowledge.opentext.com/knowledge/llisapi.dll/open/12083609

============================================================

Topic: LiveReport to check who has what rights (sys admin, user admin etc)
https://knowledge.opentext.com/knowledge/llisapi.dll/open/12068666

Discussion: Livelink LiveReports Discussion
https://knowledge.opentext.com/knowledge/llisapi.dll/open/2249677

Livelink Server:
https://knowledge.opentext.com/knowledge/llisapi.dll

To Unsubscribe from this Discussion, send an e-mail to unsubscribe.livereportsdiscussion@elinkkc.opentext.com.

Louis_Routhier

The % is generally used to make a modulo operation which is probably what is intended here so I'm quite sure this is what was expected...

Steve_McDonough

Hello Lindsay,Sorry for not getting back to you sooner. Louis is absolutely correct. The 'extra' percent sign is called a Modulo Functoid and, when used in this expression, returns the remainder of the integer division of the specified dividend and divisor. The significant thing here is that it works. A description of the modulo syntax can be found here:http://msdn2.microsoft.com/en-us/library/aa578260(d=printer).aspxLeonLeon

ken.buckman

Thanks for the info. The report works perfect on a SQL db but when i try to use it with Oracle, it gives several errors. I am in process of converting the quey to Oracle friendly syntax but if anybody has already converted it to run on Oracle, can you post it here? Thanks in advance!

Robert_Anderson_(robanderson_-_(deleted))

Did you ever get this report working?

Tim_Hunter

This should do it for oracleselect LLUser.LastName, LLUser.FirstName, LLUser.name as UserID, Department.Name as Department,(CASE WHEN mod((LLUser.UserPrivileges/1), 2) = 1 then 'Yes' else ' ' END) As LoginEnabled,(CASE WHEN mod((LLUser.UserPrivileges/2048),2) = 1 then 'Yes' else ' ' END) As PublicAccess,(CASE WHEN mod((LLUser.UserPrivileges/32),2) = 1 then 'Yes' else ' ' END) As CreateUsers,(CASE WHEN mod((LLUser.UserPrivileges/64),2) = 1 then 'Yes' else ' ' END) As CreateGroups,(CASE WHEN mod((LLUser.UserPrivileges/16),2) = 1 then 'Yes' else ' ' END) As UserAdmin,(CASE WHEN mod((LLUser.UserPrivileges/256),2) = 1 then 'Yes' else ' ' END) As SystemAdminFROM kuaf LLUserINNER JOIN kuaf Department ON LLUser.GroupID = Department.IDWHERE LLUser.Deleted = 0 AND (mod((LLUser.UserPrivileges/32),2) = 1 OR mod((LLUser.UserPrivileges/64),2) = 1 OR mod((LLUser.UserPrivileges/16),2) = 1OR mod((LLUser.UserPrivileges/256),2) = 1)ORDER BY LLUser.LastName, LLUser.FirstName

Daniel_Rose

select LLUser.LastName, LLUser.FirstName, LLUser.name "UserID", Department.Name "Department", (CASE WHEN trunc(to_char(mod((LLUser.UserPrivileges/1), 2))) = 1 then 'Yes' else ' ' END) "LoginEnabled", (CASE WHEN trunc(to_char(mod((LLUser.UserPrivileges/2048),2))) = 1 then 'Yes' else ' ' END) "PublicAccess", (CASE WHEN trunc(to_char(mod((LLUser.UserPrivileges/32),2))) = 1 then 'Yes' else ' ' END) "CreateUsers", (CASE WHEN trunc(to_char(mod((LLUser.UserPrivileges/64),2))) = 1 then 'Yes' else ' ' END) "CreateGroups", (CASE WHEN trunc(to_char(mod((LLUser.UserPrivileges/16),2))) = 1 then 'Yes' else ' ' END) "UserAdmin", (CASE WHEN trunc(to_char(mod((LLUser.UserPrivileges/256),2))) = 1 then 'Yes' else ' ' END) "SystemAdmin" FROM kuaf LLUser INNER JOIN kuaf Department ON LLUser.GroupID = Department.ID WHERE LLUser.Deleted = 0 AND (trunc(to_char(mod((LLUser.UserPrivileges/32),2))) = 1 OR trunc(to_char(mod((LLUser.UserPrivileges/64),2))) = 1 OR trunc(to_char(mod((LLUser.UserPrivileges/16),2))) = 1OR trunc(to_char(mod((LLUser.UserPrivileges/256),2))) = 1)ORDER BY LLUser.LastName, LLUser.FirstName