Documentum DQL Query to make all active user read-only

Rajkumar Mekala
Rajkumar Mekala Member
in Documentum #1

Please provide the DQL Query to make all active users read-only permission.

I tried below query, but after executing the query for particular user, I logged in webtop with that user, that user able to do create ,delete and export operations.

UPDATE dm_user OBJECTS
SET user_privileges = 1
WHERE user_name='xxxx'

Answers

  • Francois Dauberlieu
    Francois Dauberlieu Member
    #2

    I guess the user list and their parameters might be cached and you might need to restart your docbase services for this be taken into account.

    Not sure though….

  • Hicham Bahi
    Hicham Bahi E Member
    #3

    Nothing to do with caching. Setting user_privileges to 1 basically grants all users CREATE TYPE privileges, which is not what you want. User privileges have nothing to do with permissions (except for the SUPERUSER privilege which grants owner access to all objects).

    I suggest you first read the documentation about the Documentum security model. If you still have questions, then ask them once you have an understanding of ACLs.

  • Francois Dauberlieu
    Francois Dauberlieu Member
    #4

    Absolutely right, I misread the question.

    My bad

  • Michael McCollough
    Michael McCollough E Community Moderator
    #5

    "

    I tried below query, but after executing the query for particular user, I logged in webtop with that user, that user able to do create ,delete and export operations."

    With webtop, you should be able to set client capability to consumer and most everything will display read-only. If that is not enough, you can go through the permissions model to ensure all your "consuming" users only have read permissions where applicable.

Categories