Report of all permissions in CS

Emre Kaynak

Hello,

Can we take a report of all permissions in CS. If yes where am I going to take this.

Can you pls. help me for this issue.

Thanks

Emre

Find more posts tagged with

Comments

Colin_Schmidt

This is a serious report that would generate hundreds of thousands of lines, potentially. Permissions on each folder? each object?

You would start with DTREEACL and DTREE(if you want to get this from Folders-only).

Colin J.

On Wed, May 14, 2014 at 9:17 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Report of all permissions in CS Posted byemre.kaynak@admteknoloji.com (Kaynak, Emre)On 05/14/2014 09:15 AM

Hello, Can we take a report of all permissions in CS. If yes where am I going to take this. Can you pls. help me for this issue. Thanks Emre
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Content Server

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Anthony Hall

Not just hundreds of thousands, millions. How many rows in your DTreeACL table? Multiplied by a number, being the average number of users per group...!

That said, I had a request once to do that for specific folders from a customer who wanted to snapshot their permissions to a folder level every six months "in case of audit". Joining up the DTree and DTreeACL tables is the easy part. Bring in DBrowseAncestors to find everything in a folder (if you want to restrict this to a folder), and then you need some SQL to convert the bitmask into columns which a human can read, see, see contents, etc. I only listed all this out for groups - I had a separate report to show all the group memberships. This was a trade off which reduced the size of the report by an order of magnitude in exchange for making use of the data more complicated, in the unlikely event that the customer ever wanted to do so. It's probably also nice to include the path of the object too. Finally, don't run this in a LiveReport - you will tie up a thread for hours, possibly, and produce a html table which would be too large to render in a browser. Stick to running this as a direct database query. But, all that aside, I really wouldn't recommend this approach.

Or you could re-evaluate what the need actually is. Do your business owners want to be able to see permissions on a particular tree of the system? Can I suggest if so, you might be better off looking at our Permissions Manager module, which can provide this functionality (and more)? http://www.fastman.com/products/permissions-manager

Anthony Hall

Fastman Consulting

Quoted Colin Schmidt on 07/14/2014 10:00 AM:

This is a serious report that would generate hundreds of thousands of lines, potentially. Permissions on each folder? each object?

You would start with DTREEACL and DTREE(if you want to get this from Folders-only).

Colin J.