nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

permission set for a document

Sunitha_Iyer

We are using the getobjectrights lapi call to get the permission set on an object (document) for a user. But the permission returned is just a single value instead of a 'set'. It seems this value is a sum of all the permissions avaiable to the user.

I would like to know how to break up this sum into its individual components? How do you come to know which all permissions are available to the user by looking at the value returned? Kindly help.

Find more posts tagged with

Comments

Appu_Nair

Are you saying you would like to know how

36995 is interpreted as See,See Contents.

16777215 as System Admin etc...

Livelink receives the LAPI call in a ospace and it does the BitMasking.I do not know how you would do that in LAPI.I wrote this article to decipher Notification bit masks.The permission bitmasks are covered in detail in the Livereports discussion area where you have reports saying how to unmask it

https://knowledge.opentext.com/knowledge/llisapi.dll?func=ll&objId=16018488&objAction=download

Sorry can't be more help.Will see if I can dig out more.

Howard_Pell

Look at the bits that are set. Their position tells you thepermission. Hmm, kinda rhymes J

*Permission*	*Bit(s) Set*
See	1
See Contents	0, 12, 15
Modify	16
Edit Attributes	17
Add Items	2
Delete Versions	14
Delete	3
Reserve	13
Edit Permissions	4
(All records have this bit set)	7

Howard
---
Howard Pell
Senior Technical Educator, Liaison Special Projects
Open Text Corporation
www.opentext.com
Office: (519) 888-7111 Ext. 2203
Mobile (519) 574-2248

From: eLink Entry:LAPI Forum [mailto:lapi@elinkkc.opentext.com]
Sent: 2010-Mar-23 3:48 PM
To: eLink Recipient
Subject: permission set for adocument

permission set for a document

Posted by anair@alitek.com (Nair, Appu) On 2010/03/23 15:46

Are you saying you would like to know how

36995 is interpreted as See,See Contents.

16777215 as System Admin etc...

https://knowledge.opentext.com/knowledge/llisapi.dll?func=ll&objId=16018488&objAction=download

Sorry can't be more help.Will see if I can dig out more.

[To post a comment, use the normal reply function]
Topic:	permission set for a document
Forum:	LAPI Forum
Livelink Server:	knowledge-wlweb01

Sunitha_Iyer

Thanks a lot for the replies.

I am a bit confused with the bitmask concept. Exactly which bit is set in the response?

The getobjectrights call returns me a response similar to this -->

{<VOLUMEID,PARENTID,ID,RIGHTID,PERMISSIONS,ACLTYPE,SEE>
<-2000,22639,66797,-1,36995,?,?>
<-2000,22639,66797,-2,16777215,?,?>
<-2000,22639,66797,-3,16777215,?,?>
<-2000,22639,66797,-4,36995,?,?>
<-2000,22639,66797,6026,102535,0,3>}

The highligted line returns the permission for the user I am interested in.

Carsten_Kulms

The PERMISSIONS field holds the bitset as described in the APIdocumentation of GetObjectRights: "Permissions integer the user's or group's permission set"There are "Object Permission Constants" (see documentation chapter"Constants") which can be used to check for a particular permission.(see also)Please note that the other returned entries (RightID -1, -2, etc) may bealso of interest for you: see the documentation on RIGHT_WORLD,RIGHT_SYSTEM, RIGHT_OWNER, or RIGHT_GROUP. (see also)You can ignore the columns "ACLTYPE" and "SEE" in the response. (E.g. a'real' ACL, i.e. one for a real principal like a user, will always habeACLTYPE 0. Corresponding values are not returned for thesystem-generated principals.)I think there are more topics in this forum about how to intepretGetObjectRights and/or to use SetObjectRight. If I remember correctlysome example code is available as well.