nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Livereport - Group membership of deleted users(Not DauditNew)

Alexandros_Kokkinos

As far as i know when a user is being deleted , the entries from KUAFChildren are also deleted .Is there any possibility after the deletion of a user , to remain in an group ?If there is, which are the conditions for that? If the user deleted from AD and not from within CS makes any difference(e.g. synchronization problem)?

Moreover can we have a report for all deleted users and their "current memberships". Not from within DAuditNew and the memberships they may had in the past .

Thanks in advance

9.7.1-Oracle

Find more posts tagged with

Comments

Colin_Schmidt

That is the only way....through the DAUDITNEW table. Once a User is deleted and, for the sake of an argument, the group membership was not removed. You'd then have to remove them individually, a very tedious task. A LR can easily report what the groups were. Once user is deleted, there is no useful purpose in retaining the Group Membership with an ID incapable of being used by anyone.

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Tue, Mar 11, 2014 at 12:08 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-11-2014 12:02

As far as i know when a user is being deleted , the entries from KUAFChildren are also deleted .Is there any possibility after the deletion of a user , to remain in an group ?If there is, which are the conditions for that? If the user deleted from AD and not from within CS makes any difference(e.g. synchronization problem)? Moreover can we have a report for all deleted users and their "current memberships". Not from within DAuditNew and the memberships they may had in the past . Thanks in advance 9.7.1-Oracle
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

LiveReport_UserGroupHistory.rpt

Colin_Schmidt

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Tue, Mar 11, 2014 at 12:08 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-11-2014 12:02

As far as i know when a user is being deleted , the entries from KUAFChildren are also deleted .Is there any possibility after the deletion of a user , to remain in an group ?If there is, which are the conditions for that? If the user deleted from AD and not from within CS makes any difference(e.g. synchronization problem)? Moreover can we have a report for all deleted users and their "current memberships". Not from within DAuditNew and the memberships they may had in the past . Thanks in advance 9.7.1-Oracle
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

LiveReport_UserGroupHistory.rpt

Alexandros_Kokkinos

Thanks Colin for the quick response!

Is there any way of cleaning these groups? When we have hundrends or thousands of deleted users it is no just a tedious task, it is almost impossiblIe to do it 1 by 1.

Quoted Colin Schmidt on 2014-03-11 20:25:

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Tue, Mar 11, 2014 at 12:08 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Livereport - Group membership of deleted users(Not DauditNew) Posted by alexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros) On 03-11-2014 12:02

As far as i know when a user is being deleted , the entries from KUAFChildren are also deleted .Is there any possibility after the deletion of a user , to remain in an group ?If there is, which are the conditions for that? If the user deleted from AD and not from within CS makes any difference(e.g. synchronization problem)? Moreover can we have a report for all deleted users and their "current memberships". Not from within DAuditNew and the memberships they may had in the past . Thanks in advance 9.7.1-Oracle
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Colin_Schmidt

I thought that deleting a User removed them from the Groups. What it doesn't do is delete Users from objects where when they are assigned as an Individual.

There's a report that can be written (I have one) that lists out all Objects (it could be limited to Folders) that a Deleted User has individual rights to. That would give you a list to start with.

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Tue, Mar 11, 2014 at 2:31 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-11-2014 14:25

Thanks Colin for the quick response! Is there any way of cleaning these groups? When we have hundrends or thousands of deleted users it is no just a tedious task, it is almost impossiblIe to do it 1 by 1. Quoted Colin Schmidt on 2014-03-11 20:25:

That is the only way....through the DAUDITNEW table. Once a User is deleted and, for the sake of an argument, the group membership was not removed. You'd then have to remove them individually, a very tedious task. A LR can easily report what the groups were. Once user is deleted, there is no useful purpose in retaining the Group Membership with an ID incapable of being used by anyone.

Colin J. Schmidt
Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Tue, Mar 11, 2014 at 12:08 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Livereport - Group membership of deleted users(Not DauditNew) Posted by alexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros) On 03-11-2014 12:02

As far as i know when a user is being deleted , the entries from KUAFChildren are also deleted .Is there any possibility after the deletion of a user , to remain in an group ?If there is, which are the conditions for that? If the user deleted from AD and not from within CS makes any difference(e.g. synchronization problem)? Moreover can we have a report for all deleted users and their "current memberships". Not from within DAuditNew and the memberships they may had in the past . Thanks in advance 9.7.1-Oracle
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center
This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

[To post a comment, use the normal reply function]
Topic:	Livereport - Group membership of deleted users(Not DauditNew)
Forum:	Content Server LiveReports Forum
Content Server:	Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Alexandros_Kokkinos

Thanks a lot.I'd like to have it if it's possible.Mainly i want to find these groups with deleted users.

Colin_Schmidt

I'll send it later this morning.

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Wed, Mar 12, 2014 at 3:27 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Re Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-12-2014 03:23

Thanks a lot.I'd like to have it if it's possible.Mainly i want to find these groups with deleted users.
[To post a comment, use the normal reply function]
Topic: Livereport - Group membership of deleted users(Not DauditNew)
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Colin_Schmidt

It's pretty simple. It can be more open or more closed. "Subtype = 0" will report just folders. After you fix those, you could remove it and get everything else. You could exclude Personal WS, etc. You could add the CS path to it.

select dta.ownerid, dta.dataid, dt.name "Folder", dt.subtype, dta.rightid, k.name "Deleted User", k.deleted

from dtreeacl dta

join dtree dt on dta.dataid = dt.dataid and dt.subtype = 0

join kuaf k on dta.rightid = k.id and k.deleted = 1

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Wed, Mar 12, 2014 at 3:27 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Re Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-12-2014 03:23

Thanks a lot.I'd like to have it if it's possible.Mainly i want to find these groups with deleted users.
[To post a comment, use the normal reply function]
Topic: Livereport - Group membership of deleted users(Not DauditNew)
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Colin_Schmidt

Here's a modification of one I use for other purposes that provides more detail. It just reports Folders and that can be changed. You could make a copy of this to report the ACL on a specific Folder (which where I copied this) for just general reporting. I have a version that reports ACL for all objects under a folder(though they all ought to have the same as the Folder).

Colin J.

On Wed, Mar 12, 2014 at 7:53 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Re Re Livereport - Group membership of deleted users(Not DauditNew) 2 Posted bycolin.schmidt@mwv.com (Schmidt, Colin)On 03-12-2014 07:53

It's pretty simple. It can be more open or more closed. "Subtype = 0" will report just folders. After you fix those, you could remove it and get everything else. You could exclude Personal WS, etc. You could add the CS path to it.
select dta.ownerid, dta.dataid, dt.name "Folder", dt.subtype, dta.rightid, k.name "Deleted User", k.deleted
from dtreeacl dta
join dtree dt on dta.dataid = dt.dataid and dt.subtype = 0
join kuaf k on dta.rightid = k.id and k.deleted = 1

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Wed, Mar 12, 2014 at 3:27 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Re Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-12-2014 03:23

Thanks a lot.I'd like to have it if it's possible.Mainly i want to find these groups with deleted users.
[To post a comment, use the normal reply function]
Topic: Livereport - Group membership of deleted users(Not DauditNew)
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

[To post a comment, use the normal reply function]
Topic:	Livereport - Group membership of deleted users(Not DauditNew)
Forum:	Content Server LiveReports Forum
Content Server:	Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

LiveReport_ACL-DeletedUsers.rpt

Lindsay_Davies

Hi Alexandros,

I have just seen Colin’s response with a query to show folders the deleted user has access to.

That may be interesting, but the deleted user cannot log in, so the impact is only the ineffective rows in the DTreeACL table.

However, earlier in the email chain you mentioned you wanted to see what groups any deleted user was still a member of.

A word of warning here…. Do not delete any rows in your DB or you will cause much damage and even more pain in repairing!

When a user is deleted, the row in KUAF is not removed.

It has the deleted column set to 1, user privileges (like login) are removed and the name is changed to show it is a deleted user and the ID, for example “iquit (Delete) 454332”.

This is deliberate so that documents, audits, etc. can still be accessed and show meaningful data.

Also, membership of groups is removed.

Deleting a user will not delete content or audits of what that user has done in the system.

Neither will it change the access rights of objects.

This is why the Admin user has system access to be able to correct items when needed.

The following statement will help you get started.

It will report all deleted users who are still members of groups and pseudo groups (like projects, object privileges, etc.), which you can differentiate with the GroupType column.

select ku.name UserName, kc.childid UserID, kc.id GroupID, kg.name GroupName, kg.type GroupType from kuaf kg, kuaf ku, kuafchildren kc where childid in (select id from kuaf where type=0 and deleted <>0) and kg.id=kc.id and ku.id=kc.childid

If you get a lot of rows, applying an order by clause will help.

Regards

Lindsay

Lindsay Davies

European Escalation Team

Opentext UK

From: eLink Entry: Content Server LiveReports Forum [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: 2014 March 12, Wed 07:28
To: eLink Recipient
Subject: Re Re Livereport - Group membership of deleted users(Not DauditNew)

Re Re Livereport - Group membership of deleted users(Not DauditNew)

Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros) On 03-12-2014 03:23

Thanks a lot.I'd like to have it if it's possible.Mainly i want to find these groups with deleted users.

[To post a comment, use the normal reply function]
Topic:	Livereport - Group membership of deleted users(Not DauditNew)
Forum:	Content Server LiveReports Forum
Content Server:	Knowledge Center

Alexandros_Kokkinos

Thanks a lot both of you !

Lindsay that was really helpful . So from what you are saying i understood that the best practice in that case is to leave as it is!

The membership of a deleted user is it obvious for a simple user(group leader or not) ?

Lindsay_Davies

You certainly need to leave the KUAF row in tact with the deleted flag etc.

If you are concerned that a problem might exist where deleted user still own (are leader of) a group you could run a query to check for that.

I think the following would work and would be suitable for Oracle and SQL server.

select k.id,k.name,k.deleted,k.leaderid, k2.name from kuaf k, kuaf k2 where (k.type=1 or K.Type>2000) and k2.id=k.leaderid and k2.type=0 and k2.deleted <>0;

From: eLink Entry: Content Server LiveReports Forum [mailto:livereportsdiscussion@elinkkc.opentext.com]
Sent: 2014 March 12, Wed 13:50
To: eLink Recipient
Subject: RE Re Re Livereport - Group membership of deleted users(Not DauditNew)

RE Re Re Livereport - Group membership of deleted users(Not DauditNew)

Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros) On 03-12-2014 09:38

Thanks a lot both of you !

Lindsay that was really helpful . So from what you are saying i understood that the best practice in that case is to leave as it is!

The membership of a deleted user is it obvious for a simple user(group leader or not) ?

[To post a comment, use the normal reply function]
Topic:	Livereport - Group membership of deleted users(Not DauditNew)
Forum:	Content Server LiveReports Forum
Content Server:	Knowledge Center

Alexandros_Kokkinos

Well i want to remove all deleted users from the groups, projects and communities are still members.Is it safe to remove these rows from kuafchildren? Can i do this masivelly or 1-1 ?

Kyle_Swidrovich

Alexandros,

Please do not manually manipulate the database. The impact of such a change will not be apparent to you until it’s too late, depending on what you have installed in your system.

Supportable APIs have been provided for such a purpose.

Please use Content Web Services to accomplish this task.

Regards,

Kyle

Colin_Schmidt

You can not remove them outside of the Browser functionality without approval from Opentext Support. If done without their help, you would void or risk voiding your support. They have a tool for removing Users(I thought I read of one a couple of years ago) for a price. Outside of that there may be 3rd party tools, as well for sale. Outside of tools for fees, you are restricted to doing this "manually" through the normal Browser functionality.

Colin J.

On Thu, Mar 13, 2014 at 9:29 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

RE RE Re Re Livereport - Group membership of deleted users(Not DauditNew) Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 03-13-2014 09:24

Well i want to remove all deleted users from the groups, projects and communities are still members.Is it safe to remove these rows from kuafchildren? Can i do this masivelly or 1-1 ?
[To post a comment, use the normal reply function]
Topic: Livereport - Group membership of deleted users(Not DauditNew)
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Alexandros_Kokkinos

Thanks a lot for your answers.Helped me a lot!