ImpersonateUser

Andre_Sovde

I'm adding a additional method in the service that i'm building which is using the EWS. A company which will use this service has requested a way to retrieve the access rights of the individual users for the documents and folders contained within their section of LiveLink. Because there's a search engine that will use a system user, I need to use the ImpersonateUser method in order to retrieve the accessrights for the users.

Question1:   What permissions or rights does this system user need to have in order to be able to use the ImpersonateUser method for all users within the company?

Question2:   Once the ImpersonateUser has been used in order to retrieve a token, does the system user need to be reauthenticated by using AuthenticateUser or will the token (retrieved from authenticating the system user the first time) still be valid?

 

Thanks André

sgrasley

Hi, Andre.

1.  ImpersonateUser requires administrative privileges.

2.  Maybe.  Content Server can be configured to expire authentication tokens.  As long as the token has not expired (this is the default for 9.7.1, but not 10.0.0), you should be able to use it.

One caveat is that if EWS/CWS is deployed under RCS, then there's a different Authentication service that must be used.

Thanks,

Scott