Impersonate a user in OScript

Hi,Is there any way to impersonate a different user in OScript?Meaning, when a user logs into LL and does some process, my code creates some folders and apply permission. but since this user doesn't have permission to update permission on a given folder, I cannot accomplish this task in code.So during the execution of my code, is there any way to impersonate a user like 'Admin' who can apply permission and then sort of release that user?I see some code in Authentication module, but usign that gives error as Insufficient permission.. Any ideas?thankssapna

Find more posts tagged with

Comments

Philip Forshaw

Message from Philip Forshaw <philip.forshaw@res-ltd.com> via eLink

eLink

This should do it

String cnctName =$Kernel.SystemPreferences.GetPrefGeneral( 'DftConnection' )

Assoc prgAssoc =$LLIApi.PrgSession.CreateNewNamed( cnctName, { "Admin", undefined } )

Dynamic prgCtx = prgAssoc.pSession

Use the new prgCtx from then on.

PhilF

CONFIDENTIALITY NOTICE: This e-mail, including any attachments, contains information that may be confidential, and is protected by copyright. It is directed to the intended recipient(s) only. If you have received this e-mail in error please e-mail the sender by replying to this message, and then delete the e-mail. Unauthorised disclosure, publication, copying or use of this e-mail is prohibited. Any communication of a personal nature in this e-mail is not made by or on behalf of any RES group company. E-mails sent or received may be monitored to ensure compliance with the law, regulation and/or our policies.

Appu_Nair

We all use a variation of this methodhttps://knowledge.opentext.com/knowledge/llisapi.dll?func=ll&objId=3116081&objAction=view

Sapna_Shah_(sapna.shah_-_(deleted))

Thanks a bunch Phillip and Appu and (Donna).. This is exactly what I was looking for.Thansk againsapna

Kristy_Shen

Ha ha...we posted something on the same day almost at the same time!Hope everything's going well at BMO!Kristy

Appu_Nair

just an update the old link I posted has an outdated su code.Donna has since updated it and I attach a local copy .I have noticed if you use a RH and call a SU session then you have a dreaded "Login RefCnt Mismatch" so I usually end the su session by doing these two lines. prgCtx.Delete() prgCtx = undefined the prgCtx oin the above excerpt were created by me using the su script and not the passed in prgCtx.

Hans Stoop

Message from Hans Stoop <hstoop@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">eLink

One note about impersonating users and using DAPINODEs.

The DAPINODE knows in which user context it is created and DAPI actions on this node will be done in that user context.

So if you have a node and you want to do some actions on it as an Admin user then you need to retrieve the node again via the admin prgCtx.

Hans

________________________________________________________________________________________________________
Hans Stoop
Senior Consultant, Global Services

Open Text
Technopark II
Werner-von-Siemens-Ring 20
85630 Grasbrunn
Germany
Phone: +49 (0) 89 4629 1626
Mobile: +49 (0) 172 6770120
Fax:    +49 (0) 89 4629 33 1626
Email:   hans.stoop@opentext.com
Web site:       http://www.opentext.com

Place of Incorporation / Sitz der Gesellschaft: Open Text GmbH, Werner-von-Siemens-Ring 20, 85630 Grasbrunn, Germany | Phone: +49 (0) 89 4629 0 | Fax: +49 (0) 89 4629 1199 | Register Court / Registergericht: M?nchen, Germany | Trade Register Number / HRB: 168364 | VAT ID Number /USt-ID: DE 114 169 819 | Managing Director / Gesch?ftsf?hrer: John Shackleton, Walter K?hler

This e-mail is protected by domestic and international copyright laws and treaties and is the property of Open Text Corporation, it may contain confidential and/or trade secret information of the Open Text Corporation and/or its subsidiaries (OTC), and may be subject to legal privilege in favor of OTC. This e-mail may only be lawfully received, accessed, displayed on a computer screen, printed, copied, and/or used by the specific addressee(s) named above (?Authorized Recipient?) for the purpose for which it was sent by OTC. All other rights and licenses to this e-mail are fully reserved to OTC. If you are not an Authorized Recipient, you are required to immediately delete this e-mail in its entirety without printing, copying, using, and/or re-transmitting this e-mail, either in whole or in part. The transmission of this e-mail by OTC is not to be construed as a waiver by OTC and/or the individual sending this e-mail on behalf of OTC of any of their respective rights or privileges at law or otherwise, howsoever arising.

From: eLink Discussion: Development Discussion [mailto:development@elinkkc.opentext.com]
Sent: Wednesday, June 17, 2009 6:25 PM
To: eLink Recipient
Subject: Impersonate a user in OScript

Impersonate a user in OScript

Posted by sapna.shah (Shah, Sapna) on 2009/06/17 12:23

Hi,

Is there any way to impersonate a different user in OScript?

Meaning, when a user logs into LL and does some process, my code creates some folders and apply permission. but since this user doesn't have permission to update permission on a given folder, I cannot accomplish this task in code.

So during the execution of my code, is there any way to impersonate a user like 'Admin' who can apply permission and then sort of release that user?

I see some code in Authentication module, but usign that gives error as Insufficient permission..
Any ideas?

thanks
sapna

Anthony_Dodds

Hi Sapna,Did you know that there is a forum for OScript discussion on the Open Text Developer Network (http://otdn.opentext.com)? You can also find, for example, the LAPI documentation and a forum for LAPI.You can also access OTDN from the Communities menu on the Knowledge Center.CheersMike