Effective Permissions

Hi, i was wondering if there is an existing report for Oracle which shows the effective permissions of a user or group(user input) , to a specific item(user input),

Thank you in advance

Find more posts tagged with

Comments

Colin_Schmidt

Here's one that will get you started. It will list the User and/or Groups assigned to a specific Folder and their ACL and various other pieces of information. You can copy and modify it to do the same for a specific Object.

Colin J. Schmidt

Opentext Content Server Support Admin

colin.schmidt@mwv.com
+1 804.444 5012 (Direct)

MWV
501 South 5th Street
Richmond, VA 23219-0501
mwv.com

On Sat, Oct 4, 2014 at 4:49 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Effective Permissions Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 10/04/2014 04:49 PM

Hi, i was wondering if there is an existing report for Oracle which shows the effective permissions of a user(user input)or a group to a specific item(user input), Thank you in advance
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Chris Meyer

Hi Colin,

Does this LiveReport only report the direct access rights on a node? Can it also be used to determine a user's effective permissions (that may only be granted via a group membership)?

Thanks
Chris

Colin_Schmidt

It just reports what "is".

If you want to know if a User is a member of any of the groups on the picked folder, that would be a different report. There's a couple of ways going into that. I've thought about that myself in recent weeks. What I'll do, when I get time, is modify this one and also prompt for a User ID and then list the name in Parenthesis on the line of the Group the ID is in (or not a member).

If you want to see the list of all Users in each Assigned Group, that would be a different LR.

Colin J.

On Mon, Oct 6, 2014 at 8:56 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Effective Permissions Posted bychris.meyer@kwe.li (Meyer, Chris)On 10/06/2014 08:51 AM

Hi Colin, Does this LiveReport only report the direct access rights on a node? Can it also be used to determine a user's effective permissions (that may only be granted via a group membership)? Thanks
Chris
[To post a comment, use the normal reply function]Topic:Effective PermissionsForum:Content Server LiveReports ForumContent Server:Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Chris Meyer

Hi Colin,

I'd be curious to see the LiveReport once it's finished. I'm puzzled as to how one can do a bitwise OR on the permission masks to get the effective permission for a user. I'm wondering if this is the most efficient way...?

This also got me thinking and I solved it a little differently. I have a module that allows me to write and run OScript directly from the interface (sort of how LiveReports lets you write and run SQL; this allows you to write and run OScript). I solved the problem by impersonating the target user and calling the appropriate DAPI function to get the permission mask on the node (followed by other calls to decompose the mask into something human readable). It might be the least error-prone solution since it's based on the same logic Content Server uses to determine permissions.

I thought I'd throw this into the discussion since it's not obvious to me if LiveReports is the way to solve this particular problem. If it is I'm curious to see how.

Thanks
Chris

Colin_Schmidt

I've no knowledge of Oscript or the SDK. I use the way I do because I found it in the KC and seemed much better than another error-prone way I was using much earlier.

Colin J.

On Mon, Oct 6, 2014 at 10:03 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Re Effective Permissions Posted bychris.meyer@kwe.li (Meyer, Chris)On 10/06/2014 09:58 AM

Hi Colin, I'd be curious to see the LiveReport once it's finished. I'm puzzled as to how one can do a bitwise OR on the permission masks to get the effective permission for a user. I'm wondering if this is the most efficient way...? This also got me thinking and I solved it a little differently. I have a module that allows me to write and run OScript directly from the interface (sort of how LiveReports lets you write and run SQL; this allows you to write and run OScript). I solved the problem by impersonating the target user and calling the appropriate DAPI function to get the permission mask on the node (followed by other calls to decompose the mask into something human readable). It might be the least error-prone solution since it's based on the same logic Content Server uses to determine permissions. I thought I'd throw this into the discussion since it's not obvious to me if LiveReports is the way to solve this particular problem. If it is I'm curious to see how. Thanks
Chris
[To post a comment, use the normal reply function]Topic:Effective PermissionsForum:Content Server LiveReports ForumContent Server:Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.

Alexandros_Kokkinos

Thanks a lot Colin, that was really helpful.

I really appreciate,

Best regards,

Colin_Schmidt

Here is the LR which prompts for a Folder & a User. If it finds the User in a Group, it will show its ID in braces, otherwise the Braces are empty. Showing all the Users in a Group would be an undesirable report since it could number in the hundreds or even thousands.

Colin J.

On Tue, Oct 7, 2014 at 10:06 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Re Re Effective Permissions Posted byalexandros.kokkinos@ecb.europa.eu (Kokkinos, Alexandros)On 10/07/2014 10:05 AM

Thanks a lot Colin, that was really helpful. I really appreciate, Best regards,
[To post a comment, use the normal reply function]
Topic: Effective Permissions
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from MeadWestvaco Corporation or subsidiary companies, which may be confidential, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify MeadWestvaco immediately at postmaster@mwv.com.