Report to show permissions on Project / Folder - Past and Present

Hello,

Would appreciate if someone could point me in the right direction as to how I can ascertain details of permissions to a project (include sub items of folders) past and present please.

There is an Event Audit that allows you to run a querry on a project and project permissions changed but this does not include any permission changes on a folder within a project.

We are using LL9.7.1 and SQL 2008.

Thank you.

Find more posts tagged with

Comments

Colin_Schmidt

Do you want permissions on a Project or folders within the project or both?

Colin J.

On Fri, Jul 24, 2015 at 6:24 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Report to show permissions on Project / Folder - Past and Present Posted byshajad.ashraf@uk.gt.com (Ashraf, Shajad)On 07/24/2015 06:21 AM

Hello,Would appreciate if someone could point me in the right direction as to how I can ascertain details of permissions to a project (include sub items of folders) past and present please. There is an Event Audit that allows you to run a querry on a project and project permissions changed but this does not include any permission changes on a folder within a project. We are using LL9.7.1 and SQL 2008. Thank you.
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

This electronic message contains information from WestRockCompany (www.westrock.com) or itssubsidiaries, which may be confidential, privileged or otherwise protected fromdisclosure. The information is intended to be disclosed to and used by only thenamed recipient(s). If you are not the intendedrecipient, then your review, use, disclosure, printing, copying, ordistribution of this message or its contents is prohibited. If you havereceived this message in error, please notify WestRock immediately at postmaster@westrock.com, and delete themessage from your system. Unless previously authorized in writing, thismessage does not constitute an offer, acceptance, or agreement of any kind.Sender is not liable for damage, errors or omissions related to or caused bytransmission of this message. © WestRock Company.

Colin_Schmidt

There is a LR in this Forum listing ACLs. It's very simple to modify. You can make it restrictive to "containers" or open to "Objects" or "Nodeid".

For a Folder or Object, it'll list the assigned groups and individuals. For a Project, it'll list the "Guests" or "Members" or "Coordinators", but not those within those groups, and their permissions.

Colin J.

On Fri, Jul 24, 2015 at 7:52 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Report to show permissions on Project / Folder - Past and Present Posted bycolin.schmidt@westrock.com (Schmidt, Colin)On 07/24/2015 07:52 AM

Do you want permissions on a Project or folders within the project or both?

Colin J.

On Fri, Jul 24, 2015 at 6:24 AM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Report to show permissions on Project / Folder - Past and Present Posted byshajad.ashraf@uk.gt.com (Ashraf, Shajad)On 07/24/2015 06:21 AM

Hello,Would appreciate if someone could point me in the right direction as to how I can ascertain details of permissions to a project (include sub items of folders) past and present please. There is an Event Audit that allows you to run a querry on a project and project permissions changed but this does not include any permission changes on a folder within a project. We are using LL9.7.1 and SQL 2008. Thank you.
[To post a comment, use the normal reply function]
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

[To post a comment, use the normal reply function]
Topic:	Report to show permissions on Project / Folder - Past and Present
Forum:	Content Server LiveReports Forum
Content Server:	Knowledge Center

Alister Grigg

Hi Shajad

We get these types of queries pretty often from customers using our Permissions Manager product. It has integrated reporting so you can quickly see what the present permissions are on a particlular container and it's children. My guys tell me we have a report that can be easily modified to show what you are after, which I must mention does not need the base product although that is cleaner for users if you want them to run these reports often.

Please feel free to reach out to me at alister.grigg@fastman.com if you would like more information.

Cheers

Colin_Schmidt

The past permissions can be reported from DAUDITNEW. The DTREEACL will provide the current, but the DAUDITNEW will have the previous values.

AuditID = 9 for PermChange. VALUEKEY representing the Group/User and VALUE1 the new value. The binary values would be converted the same way as in decyphering the Present Perms. It would make for a complex SQL.

Colin_Schmidt

I hate to give this secret away, but here is my LR for the history. I wrote it to be able to reconstruct Perms in case of sabotage or a gross fat finger on anyones part.

I can't say this will satisfy your requirements, but it'll give you an idea. There are rules in the DAUDITNEW records that determine how to interpret the given record. Trial and error, trial and error.

Seek and you will find. Peer into the tables and their secrets will be revealed.

Colin J.

"I have a LR for that."

On Mon, Jul 27, 2015 at 4:11 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Report to show permissions on Project / Folder - Past and Present Posted bycolin.schmidt@westrock.com (Schmidt, Colin)On 07/27/2015 04:10 PM

The past permissions can be reported from DAUDITNEW. The DTREEACL will provide the current, but the DAUDITNEW will have the previous values.AuditID = 9 for PermChange. VALUEKEY representing the Group/User and VALUE1 the new value. The binary values would be converted the same way as in decyphering the Present Perms. It would make for a complex SQL.
[To post a comment, use the normal reply function]Topic:Report to show permissions on Project / Folder - Past and PresentForum:Content Server LiveReports ForumContent Server:Knowledge Center

Colin_Schmidt

I hate to give this secret away, but here is my LR for the history. I wrote it to be able to reconstruct Perms in case of sabotage or a gross fat finger on anyones part.

Seek and you will find. Peer into the tables and their secrets will be revealed.

Colin J.

"I have a LR for that."

On Mon, Jul 27, 2015 at 4:11 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Report to show permissions on Project / Folder - Past and Present Posted bycolin.schmidt@westrock.com (Schmidt, Colin)On 07/27/2015 04:10 PM

The past permissions can be reported from DAUDITNEW. The DTREEACL will provide the current, but the DAUDITNEW will have the previous values.AuditID = 9 for PermChange. VALUEKEY representing the Group/User and VALUE1 the new value. The binary values would be converted the same way as in decyphering the Present Perms. It would make for a complex SQL.
[To post a comment, use the normal reply function]Topic:Report to show permissions on Project / Folder - Past and PresentForum:Content Server LiveReports ForumContent Server:Knowledge Center

Alister Grigg

All good Colin - my guys tell me it does much the same as our freebie report but in a slightly different way.

Colin_Schmidt

I'm always open to my error in things. It's not as nice as having the values converted, but I can add that when I get time.

Colin J.

On Mon, Jul 27, 2015 at 8:11 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:

Re Report to show permissions on Project / Folder - Past and Present 2 Posted byalister.grigg@fastman.com (Grigg, Alister)On 07/27/2015 08:10 PM

All good Colin - my guys tell me it does much the same as our freebie report but in a slightly different way.
[To post a comment, use the normal reply function]
Topic: Report to show permissions on Project / Folder - Past and Present
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

Colin_Schmidt

What would make this LR long would be to put in the DECODE for each(to see what the actual permissions are in English) and a double-set in case Brava was used by the Site.....and OT Support advocates in their document for LR and Support not to write lengthy SQL. I stand accused of sometimes extremely lengthy SQL. Mea Culpa. I prefer validating information to accompany the bare basics, whatever that little ever tells anyone.

Colin J.

On Mon, Jul 27, 2015 at 10:02 PM, Colin Schmidt <colin.schmidt@westrock.com> wrote:

I'm always open to my error in things. It's not as nice as having the values converted, but I can add that when I get time.

Colin J.
On Mon, Jul 27, 2015 at 8:11 PM, eLink Entry: Content Server LiveReports Forum <livereportsdiscussion@elinkkc.opentext.com> wrote:
Re Report to show permissions on Project / Folder - Past and Present 2 Posted byalister.grigg@fastman.com (Grigg, Alister)On 07/27/2015 08:10 PM

All good Colin - my guys tell me it does much the same as our freebie report but in a slightly different way.
[To post a comment, use the normal reply function]
Topic: Report to show permissions on Project / Folder - Past and Present
Forum: Content Server LiveReports Forum
Content Server: Knowledge Center

Alister Grigg

I'll send you a separate email with contact details for Anthony Hall, who wrote "our version" of this report. I'm sure he won't mind comparing notes and we can post any updates for others to use .