How doI figure out what permissions a user has to a specified folder?

Or what permssions a user has? How do I learn how to construct these types of queries I have very limited knowledge of the system schema. Where does on gain knowledge, I don't have the option to go to a class.

Find more posts tagged with

Comments

komments

Message from Greg Kellogg <gkellogg@opentext.com> via eLink

eLink

Technical Services has a module called Permissions Viewer. I saw it in a presentation today. I don’t know the cost but it makes finding permissions much easier.

Greg Kellogg

(361) 815-8950

From: eLink Discussion: Live Reports Discussion [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: Monday, April 11, 2011 4:07 PM
To: eLink Recipient
Subject: How doI figure out what permissions a user has to a specified folder?

How doI figure out what permissions a user has to a specified folder?

Posted by wmader@jeffco.us (Mader, Walt) on 2011/04/11 17:04

[To reply to this thread, use your normal E-mail reply function.]
Discussion:	Live Reports Discussion
Livelink Server:	knowledge-wlweb01

To Unsubscribe from this Discussion, send an e-mail to unsubscribe.livereportsdiscussion@elinkkc.opentext.com.

Evert_Kuiken

Hi Walt,Dit you do a search in this forum or on the entire OTKC? This is an FAQ and the answer should be in this forum somewhere.Evert

wmader

No I didn't search I'll try that. Thanks.

wmader

Thanks Greg. I was unaware of this utility and it looks promising but it may be too cost prohibitive due to budget constraints. I'm going to search to see if someone has come up with a SQL solution to do get this information.

CBancroft

Message from Chris Bancroft <cbancrof@opentext.com> via eLink

eLink

Walt,

If you are simply looking for a list of the objects a user has permission to you can use sql like this:

SELECT DTree.*,KUAF.Name "Group", DTree.Name "Object", DTree.SubType, DTree1.Name "Parent", DTreeACL.Permissions FROM DTreeACL,KUAF,DTree,DTree DTree1 WHERE DTree.ParentID = DTree1.DataID AND DTreeACL.DataID = DTree.DataID AND DTreeACL.RightID = KUAF.ID AND DTreeACL.RightID = %1

The %1 is the userid in question. You can put this in a live report and prompt for a userid or simply put it in a db client with an explicit userid.

This simply returns a list of the objects the user has permission to and so it could return a very large result set. You need to be aware of that.

Here is a list of the permissions and their values. Perhaps it can be useful

WHEN 128 THEN 'No Rights'

WHEN 130 THEN 'S'

WHEN 36995 THEN 'S/SC'

WHEN 36999 THEN 'S/SC/AI'

WHEN 62666 THEN 'S/M'

WHEN 65670 THEN 'S/M/AI'

WHEN 102531 THEN 'S/SC/M'

WHEN 102535 THEN 'S/SC/M/AI'

WHEN 102547 THEN 'S/SC/M/EP'

WHEN 102551 THEN 'S/SC/M/EP/AI'

WHEN 118915 THEN 'S/SC/M/DV'

WHEN 118919 THEN 'S/SC/M/AI/DV'

WHEN 118923 THEN 'S/SC/M/DV/D'

WHEN 118927 THEN 'S/SC/M/AI/DV/D'

WHEN 118931 THEN 'S/SC/M/EP/DV'

WHEN 118939 THEN 'S/SC/M/EP/DV/D'

WHEN 118935 THEN 'S/SC/M/EP/AI/DV'

WHEN 118943 THEN 'S/SC/M/DP/AI/DV/D'

WHEN 127107 THEN 'S/SC/M/DV/R'

WHEN 127111 THEN 'S/SC/M/AI/DV/R'

WHEN 127115 THEN 'S/SC/M/DV/D/R'

WHEN 127119 THEN 'S/SC/M/AI/DV/D/R'

WHEN 127123 THEN 'S/SC/M/EP/DV/R'

WHEN 127127 THEN 'S/SC/M/EP/AI/DV/R'

WHEN 127131 THEN 'S/SC/M/EP/DV/D/R'

WHEN 127135 THEN 'S/SC/M/EP/AI/DV/D/R'

WHEN 233603 THEN 'S/SC/M/EA'

WHEN 233607 THEN 'S/SC/M/EA/AI'

WHEN 233619 THEN 'S/SC/M/EP/EA'

WHEN 233623 THEN 'S/SC/M/EP/EA/AI'

WHEN 249987 THEN 'S/SC/M/EA/DV'

WHEN 249991 THEN 'S/SC/M/EA/AI/DV'

WHEN 249995 THEN 'S/SC/M/EA/DV/D'

WHEN 249999 THEN 'S/SC/M/EA/AI/DV/D'

WHEN 250003 THEN 'S/SC/M/EP/EA/DV'

WHEN 250007 THEN 'S/SC/M/EP/EA/AI/DV'

WHEN 250011 THEN 'S/SC/M/EP/EA/DV/D'

WHEN 250015 THEN 'S/SC/M/EP/EA/AI/DV/D'

WHEN 258179 THEN 'S/SC/M/EA/DV/R'

WHEN 258183 THEN 'S/SC/M/EA/AI/DV/R'

WHEN 258187 THEN 'S/SC/M/EA/DV/D/R'

WHEN 258191 THEN 'S/SC/M/EA/AI/DV/D/R'

WHEN 258195 THEN 'S/SC/M/EP/EA/DV/R'

WHEN 258199 THEN 'S/SC/M/EP/EA/AI/DV/R'

WHEN 258203 THEN 'S/SC/M/EP/EA/DV/D/R'

WHEN 258207 THEN 'Full Permissions'

WHEN 16777215 THEN 'Admin of the object, full perms'

From: eLink Discussion: Live Reports Discussion [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: Tuesday, April 12, 2011 10:30 AM
To: eLink Recipient
Subject: Re permission utility

Re permission utility		Posted by wmader@jeffco.us (Mader, Walt) on 2011/04/12 10:27
In reply to: RE How doI figure out what permissions a user has to a specified folder?		Posted by gkellogg (Kellogg, Gregory) on 2011/04/11 18:09

Thanks Greg. I was unaware of this utility and it looks promising but it may be too cost prohibitive due to budget constraints.

I'm going to search to see if someone has come up with a SQL solution to do get this information.

[To reply to this thread, use your normal E-mail reply function.]
Topic:	How doI figure out what permissions a user has to a specified folder?
Discussion:	Live Reports Discussion
Livelink Server:	knowledge-wlweb01

To Unsubscribe from this Discussion, send an e-mail to unsubscribe.livereportsdiscussion@elinkkc.opentext.com.

Narasimha_Rao

Message from Narsi <narsi@supaisystems.com> via eLink

Message from Narsi <narsi@supaisystems.com> via eLink

Hi�Walt,

I hope below query will help you to get Folder permissions based on User.�

I have attached LiveReport also with this mail.

Inputs:�Container : Folder Name

Param %1: User Input 1

Param %2: UserID

Report Format: Auto LiveReport

SQL:�

SELECT Permissions = CASE Permissions ��

WHEN '128' THEN 'No Permissions' �

WHEN '130' THEN 'See' �

WHEN '36995' THEN 'See, See Content' �

WHEN '65666' THEN 'See, Modify' �

WHEN '65670' THEN 'See, Modify, Add Items' �

WHEN '102531' THEN 'See, See Content, Modify' �

WHEN '102535' THEN 'See, See Content, Modify, Add Items' �

WHEN '102547' THEN 'See, See Content, Modify, �Edit permissions' �

WHEN '102551' THEN 'See, See Content, Modify, �Edit permissions, Add Items' �

WHEN '118915' �THEN 'See, See Content, Modify, Delete versions' �

WHEN '118919' �THEN 'See, See Content, Modify, Add Items, Delete versions'�

WHEN '118923' THEN 'See, See Content, Modify, Delete versions, Delete'�

WHEN '118927' THEN 'See, See Content, Modify, Add Items, Delete versions, Delete'�

WHEN '118931' THEN 'See, See Content, Modify, �Edit permissions, Delete versions'�

WHEN '118939' THEN 'See, See Content, Modify, �Edit permissions, Delete versions, Delete'�

WHEN '127107' THEN 'See, See Content, Modify, �Delete versions, Reserve'�

WHEN '127111' THEN 'See, See Content, Modify, �Add Items, Delete versions, Reserve'�

WHEN '127115' THEN 'See, See Content, Modify, �Delete versions, Delete, Reserve'�

WHEN '127119' THEN 'See, See Content, Modify, �Add Items, Delete versions, Delete, Reserve'�

WHEN '127123' THEN 'See, See Content, Modify, Edit permissions, Delete versions, Reserve'�

WHEN '127131' THEN 'See, See Content, Modify, Edit permissions, Delete versions, Delete, Reserve'�

WHEN '233603' THEN 'See, See Content, Modify, Edit attributes'�

WHEN '233607' THEN 'See, See Content, Modify, Edit attributes, Add Items'�

WHEN '233619' THEN 'See, See Content, Modify, Edit permissions, Edit attributes'�

WHEN '249987' THEN 'See, See Content, Modify, Edit attributes, Delete versions'�

WHEN '249995' THEN 'See, See Content, Modify, Edit attributes, Delete versions, Delete'�

WHEN '258179' THEN 'See, See Content, Modify, Edit attributes, Delete versions, Reserve' �

WHEN '258187' THEN 'See, See Content, Modify, Edit attributes, Delete versions, Delete, Reserve' �

WHEN '16777215' THEN 'Administrator Rights' �

END FROM DtreeACL , Dtree �

WHERE Dtree.DataID = DtreeACL.DataID �

AND Dtree.Subtype=0 �

AND DtreeACL.DataID = %1 �

AND DtreeACL.RightID = %2�

Thanks and Regards,
Narsi
Supai Systems,
Bangalore, India.
e-mail� : narsi@supaisystems.com
website: www.supaisystems.com

On Tue, Apr 12, 2011 at 2:37 AM, eLink Discussion: Live Reports Discussion <livereportsdiscussion@elinkkc.opentext.com> wrote:

How doI figure out what permissions a user has to a specified folder? � Posted by wmader@jeffco.us (Mader, Walt) on 2011/04/11 17:04
�
Or what permssions a user has? How do I learn how to construct these types of queries I have very limited knowledge of the system schema. Where does on gain knowledge, I don't have the option to go to a class.
[To reply to this thread, use your normal E-mail reply function.]
Discussion: Live Reports Discussion
Livelink Server: knowledge-wlweb01
To Unsubscribe from this Discussion, send an e-mail to unsubscribe.livereportsdiscussion@elinkkc.opentext.com.