Questions regarding acl

ro3er

Hi guys,

I have several questions regarding acl and was wondering if anyone could help me with them:

1. How do I define the users/groups and their access using ACL?

2. How do I use the IDfPermit? (this is a little embarrassing but I

need to know how do create an instance of this interface and invokes

its underlying methods. I've browse through the DFC javadocs and

could not find any concrete samples for it)

3. If I create a new document in da and assigns a write permission to

its user(say officer1), does that automatically creates an acl?

4. And finally, where can I find more samples regarding acl (other

than the javadoc which contains only 1 example). I would be very

grateful if anyone here could provide me with some sample codes as

well.

That's about all the questions I have for now. Thanks in advance.

mszurap

Hi!

1.The recommended way to use ACLs is to create named ACLs (ACL with predefined groups and users as accessors - you can create ACLs in Documentum Administrator) and assign them to your objects. If you not do so, content server automatically assigns an acl to every object (these generated acls are called like dm_45....). If you cannot define named acls (for example you have to dinamically add accessors (users, groups) to your objects) then you can do it with grant and revoke methods.

2. You can make it with "new DfPermit()"... It's not in the Javadoc, but you can still make an instance of it.

3. Yes, it creates a new ACL, thats why it is not recommended way to do so, as generated acls are growing every time. But sometimes you don't have another choice.

4. You should read the documentation: Content_Server_6_fundamentals.pdf Page 115-136 and Content_Server_6_administration.pdf Page 353-380. This may seem too much, but it is very important to know these things as security is one of the most important aspect of content management.