How to get a sub group permissions?

MarkedOne · 2024-01-14T13:38:14+00:00

There was an error rendering this rich post.

Hi,

There is a CS DB table named "DTreeACL" which contains info about documents users / groups ID's and their permission level.

I have a group which contains sub group inside. Example :

Group A contains sub group A1. I'm unable to find in the DtreeACL table the permissions of A1 at the RightID column.

Where can I find it? Is it possible?

Find more posts tagged with

Note:

If there are Accepted Answers, those will be shown by default. You can switch to 'All Replies' by selecting the tab below.

Accepted answers

All comments

Greg Griffiths

The A1 group would have the same permissions as the A group as A1 is a member of A. Remember that users may have different rights as other groups / individual permissions may come together.

If you were expecting a different result, can you share some more information about what you are trying to do ?

MarkedOne

Hi,

Thanks for the reply. I'll try to focus on my question :

A1 group is in A group. A group is the main group. A1 is the sub group inside A.

I have a folder in CS named "Folder1" on which A group is in it's permissions list.

Whenever I go to the DTreeACL table and search for all the folders where A1 is appears in, I don't find any results. Despite the fact A1 is in A and A is in the permissions list of Folder1 I can't find A1 connected linked to A1.

Hope it's more clear now.

Thanks!

appuq

It is found out by figuring out group memberships(Given a group tell me individuals as well as group). It is evaluated on runtime by running calculations based on KUAF & KUAFChildren.Also, Livelink gives the highest possibility of permissions when a node is consulted. For example, if you have a Group on an Object that has S, SC, and PA have up to Delete the Group's S, SC is trumped for that.

If you have access to WR and know how to write it then look in the tag called DMembership stands for Direct Members and IMembership for indirect membership.

Also, the questions should always be asked on the basis of a DtreeNode and not on the basis of Groups and their inner contents.

Consider a Scenario Simple like this

A FolderID with GroupA on its assigned ACL with S,SC. Group A consists of GroupB and a Person MarkedOne

When Marked One comes to FolderID you get S, SC(not to confuse the reader I am not going to say how livelink will calculate the highest functionality Marked One gets here by virtue of any other possibility like SA or PA) .

So now in another Folder you put the same Group with Upto Delete, So now MarkedOne has Delete on that.

So if you write a report saying GroupA has SC it is meaningless.

The report has to say in what Folder, Workspace what not:)

https://appukili.wordpress.com/2015/05/03/general-help-series-2/

Greg Griffiths

As per the above, you would only see Group A in DTreeACL as thats the group that is assigned the ACL, at runtime, as @appuq mentions, this would be expanded out for its membership as needed and then merged together to get the actual permission on the node for a user.

David Henshaw

@MarkedOne…..have you taken a look at Fastman Permissions Manager? It will likely answer your immediate question and many others "out-of-the-box". No more messy SQL and having to reverse engineer the tables :)