nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Can I cache a prgCtx?

Philip Forshaw

I am adding some code to a call that is made in nearly all CS calls which requires an Admin prgctx to execute. I would like to cache in memory my prgCtx to save creating and destroying it every time a call is made, slowing the system (I imagine).

Can anyone see an issue with doing this? I've written the caching code but am nervous about implementing it in case there is a serious reason not to.

Many thanks,

Phil

Find more posts tagged with

Comments

Appu_Nair1

in this thread DT commented

https://knowledge.opentext.com/knowledge/cs.dll?func=ll&objId=30923133&objAction=viewincontainer

and said the bad after effects of a admin context.Have a peek.

Could your design mark all the requests that need elevated perms and put it in a cache object or your own schema

and you work it thru a agent in the background with actually a 'Admin' context ? or is the design

allowing for real time on the fly messages to the user?

Hans Stoop

Caching of PrgCtx may results in errors as have been encountered in some modules. Your cached prgCtx may be removed from the internal CS cache and then you get all kind of unpredictable errors when you use your prgCtx.

Hans

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: Dienstag, 19. Februar 2013 17:19
To: eLink Recipient
Subject: Can I cache a prgCtx?

Can I cache a prgCtx?

Posted byphilip.forshaw@res-ltd.com (Forshaw, Philip) On 02-19-2013 11:12

Can anyone see an issue with doing this? I've written the caching code but am nervous about implementing it in case there is a serious reason not to.

Many thanks,

Phil

[To post a comment, use the normal reply function]
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

David Templeton

Afternoon all,

There are number of issues in this areaJ it is interesting since this has been a topic of conversation for the couple of weeks.

<![if !supportLists]>1. <![endif]> Why do you need the admin prgctx? Is it because you need a user to do operations that can need bypass perms? Doing some system operation on behalf of real users where the real user should not have full perms?

<![if !supportLists]>2. <![endif]>As for caching, the current method of storing the prgCtx in a cache list has worked for the most part for a long time, but as Hans points out it has issues, mainly around the deletion of the object and the references that still hold onto the value expecting it to be still present.

There are ideas floating around but it would be interesting to see input on these topics:

<![if !supportLists]>1. <![endif]>Would the ability to have a ‘system’ named user help in these circumstances? For instance for Template Workspaces could have a Workspace user to do work such as creating the instances. Then the audit would show this to be done by a named user. Related to this, what can I do to stop you from using the Admin user? :-)

<![if !supportLists]>2. <![endif]>There is some investigation being done here, now the idea of caching is not recommended but at the very least the current situation where a script crash when the object goes out of scope should be handled better.

Thanks

David

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: Tuesday, February 19, 2013 11:54 AM
To: eLink Recipient
Subject: RE Can I cache a prgCtx?

RE Can I cache a prgCtx?

Posted byhstoop@opentext.com (Stoop, Hans) On 02-19-2013 11:53

Hans

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: Dienstag, 19. Februar 2013 17:19
To: eLink Recipient
Subject: Can I cache a prgCtx?

Can I cache a prgCtx?

Posted by philip.forshaw@res-ltd.com (Forshaw, Philip) On 02-19-2013 11:12

Can anyone see an issue with doing this? I've written the caching code but am nervous about implementing it in case there is a serious reason not to.

Many thanks,

Phil

[To post a comment, use the normal reply function]
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

[To post a comment, use the normal reply function]
Topic:	Can I cache a prgCtx?
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

LindaB.png

Carsten_Kulms

I would like to add the following comments:> Can I cache a prgCtx?As outlined in previous replies you should not do so - on your own.On the other hand there is no need to do so: As long as you obtain the 'special' prgCtx object from LLIAPI:PrgSession by the usual function the system does the caching for you: the function description is "Create a new or return an existing program session" (Granted, this is not obvious in the SDK documentation).As usual with caches it can still happen that a prgCtx has to be re-created on your request but likely rather infrequently.Aside that I recommend to consider carefully what was said about potential issues with using the "Admin" account in such situations / this way.

Hans Stoop

Hi David,

The reason why we need to execute as an user with bypass or full permission is that the user is allowed to do certain actions, but the actions has side effects or additional actions that need to be executed to keep the data functional consistent. I don’t have the need to have system administration rights.

The simplest example is that of a functionality offered by RecMan: On move the item gets the permissions of the destination folder.

Do be able to do the move the user needs to have the rights to do the move. To be able to apply the permissions he needs to have Edit Permissions.

The way I see this from a functional perspective is:

The user Admin says that he wants to have the permissions on the items in the folder to be all the same.

The normal user does the move.

The admin user sees that and does the actions that he has configured to do, e.g. assign the permissions.

With the creation of Binders, Case and Business Workspaces you have the same situation. The normal user is allowed create the item, but the actual work is done by the agent because it is a specialized task.

An equivalent in the real world is that you are going to deposit or retrieve money from your bank account. You have the right to get the money, because you have the money on your account, but you cannot grab the money yourself from the pile.

What we are looking for is being able to say that certain functions are executed by a different user. The actual user still need to have a proper permissions to call this function, but afterwards it is executed in a different user context.

I hope this makes sense.

Hans

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: Dienstag, 19. Februar 2013 22:26
To: eLink Recipient
Subject: RE RE Can I cache a prgCtx?

RE RE Can I cache a prgCtx?

Posted bydavidt@opentext.com (Templeton, David) On 02-19-2013 16:25

Afternoon all,

There are number of issues in this areaJ it is interesting since this has been a topic of conversation for the couple of weeks.

1. Why do you need the admin prgctx? Is it because you need a user to do operations that can need bypass perms? Doing some system operation on behalf of real users where the real user should not have full perms?

2. As for caching, the current method of storing the prgCtx in a cache list has worked for the most part for a long time, but as Hans points out it has issues, mainly around the deletion of the object and the references that still hold onto the value expecting it to be still present.

There are ideas floating around but it would be interesting to see input on these topics:

1. Would the ability to have a ‘system’ named user help in these circumstances? For instance for Template Workspaces could have a Workspace user to do work such as creating the instances. Then the audit would show this to be done by a named user. Related to this, what can I do to stop you from using the Admin user? :-)

2. There is some investigation being done here, now the idea of caching is not recommended but at the very least the current situation where a script crash when the object goes out of scope should be handled better.

Thanks

David

RE Can I cache a prgCtx?

Posted by hstoop@opentext.com (Stoop, Hans) On 02-19-2013 11:53

Hans

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: Dienstag, 19. Februar 2013 17:19
To: eLink Recipient
Subject: Can I cache a prgCtx?

Can I cache a prgCtx?

Posted by philip.forshaw@res-ltd.com (Forshaw, Philip) On 02-19-2013 11:12

Can anyone see an issue with doing this? I've written the caching code but am nervous about implementing it in case there is a serious reason not to.

Many thanks,

Phil

[To post a comment, use the normal reply function]
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

[To post a comment, use the normal reply function]
Topic:	Can I cache a prgCtx?
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

[To post a comment, use the normal reply function]
Topic:	Can I cache a prgCtx?
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

David Templeton

Hans

Yes, I think we are on the same page, sort of :-)

“With the creation of Binders, Case and Business Workspaces you have the same situation. The normal user is allowed create the item, but the actual work is done by the agent because it is a specialized task.”

As you probably realize this is the issue, the audit trail say the admin performed the operation, when in fact that is not case it was an account that was executing the action on behalf of the user. From an audit trail perspective this is not desirable to try and explain, to make matters worse, when multiple solutions use the same technique and then the admin is doing a lot of stuff. Instead the proposal would have solutions generate a system user to perform these actions. In that way, the audit trail can identify the real source ( hopefully easier ).

There would be additional auditing of course, would not able to login from the UI etc. But, I think it makes more sense than the practices we are doing today

Does that make sense?

Regards

David

Philip Forshaw

Hi All

Many thanks all for your feedback.

I confess I didn't realise CS did its own caching of contexts, I will try this out while not caching the context and see how I go.

Regarding the reasons for an Admin context, for us it is to read the database (a simple call taking very little time) to confirm that source of the original request - and other factors - are legitimate. I also use the Admin context in event scripts so I can for example set perms on documents in the system. The user executing the previous step will not have permissions to do this so I need Admin.

If there was such a concept as an 'internal' user in CS that didn’t require a license, I would use that instead J

Thanks again,

Philip Forshaw

From: eLink Entry: Content Server Development Forum [mailto:development@elinkkc.opentext.com]
Sent: 19 February 2013 22:31
To: eLink Recipient
Subject: RE RE RE Can I cache a prgCtx?

RE RE RE Can I cache a prgCtx?

Posted by davidt@opentext.com (Templeton, David) On 02-19-2013 17:30

Hans

Yes, I think we are on the same page, sort of :-)

There would be additional auditing of course, would not able to login from the UI etc. But, I think it makes more sense than the practices we are doing today

Does that make sense?

Regards

David

[To post a comment, use the normal reply function]
Topic:	Can I cache a prgCtx?
Forum:	Content Server Development Forum
Content Server:	Knowledge Center

CONFIDENTIALITY NOTICE: This e-mail, including any attachments, contains information that may be confidential, and is protected by copyright. It is directed to the intended recipient(s) only. If you have received this e-mail in error please e-mail the sender by replying to this message, and then delete the e-mail. Unauthorised disclosure, publication, copying or use of this e-mail is prohibited. Any communication of a personal nature in this e-mail is not made by or on behalf of any RES group company. E-mails sent or received may be monitored to ensure compliance with the law, regulation and/or our policies.