Disabled Trustees

JimL

When we disable a trustee we would like to remove that trustee from all workspace workgroups and security policies.

We have two database queries that return the workgroup SIDs and security policy SIDs for a trustee along with their associated facility SID and workspace SID.

We're able to remove a trustee from a workgroup by using (in part) the searchWorkgroups method of the Workspace class. Once the workgroup is found, we call the removeMember method (and of course the update method).

To remove a trustee from a security policy, we attempt to use the searchSecurityPolicies method of the Workspace class, but no policies are found.

In both instances our profileCondition looks something like this:

"BASE:ID = 1234"

We can find trustees, facilities, workspaces, and workgroups using a SID, but we can't find a security policy using its SID???

What am I doing wrong?

JimL

As a workaround to our problem, we're using the getAllSecurityPolicies method of the Workspace class and then matching the names of the security policies in the resulting array with the names returned from our query.

Unfortunately, the getAllSecurityPolicies does not return any custom security policies (those set directly in folder/document properties).

Is there a way to list or retrieve these custom security policies?