Wednesday, January 9, 2013

User Privileges & Client Capability

Managing User’s Client Capability, Privileges and Extended Privileges has always been a confusing task,and Documentum does not make life easy for the developers and the admins, specially when one has to do the mappings in the back-end through DQLs or APIs.
The numbers and business terms do not quite correlate and it can be very confusing and annoying to remember.

Another issue I would like to address here is the confusion between Client Capability and Privileges. As a simple rule of thumb, I always remember it this way,
   1. Privileges determines your control over the documentum objects.
   2. Client Capability determines you control over the instance of the documentum objects.
Simple enough I guess!!!

I would advice you be very careful with the Privileges and Capabilities you grant, as when you come up with your set of permissions and mappings, the repercussion are going to be dramatic.
So, here are the attributes, their numerical values and what they stand for. Once you know what these numbers and attributes stand for you can build your DQLs accordingly.
Client Capability:

Attribute
Client Capability
Numeric Value








client_capability
Consumer
1
Contributor
2
Consumer and Contributor
3
Coordinator
4
Coordinator and Consumer
5
Coordinator and Contributor
6
Consumer, Contributor and Coordinator
7
System Administrator
8
System Administrator and Consumer
9
System Administrator and contributor
10
System Administrator, contributor and Consumer
11
System Administrator and Coordinator
12
System Administrator, Coordinator and Consumer
13
Contributor, Coordinator and Administrator
14
All Capabilities
15

  Privileges:
Attribute
Client Capability
Numeric Value




user_privileges
None
0
Create Type
1
Create Cabinet
2
Create Group
4
Create Group and Type
5
Create Group and Cabinet
6
Create Group, Cabinet and Type
7
SYSADMIN
8
SUPERUSER
16

Extended privileges:
Attribute
Extended Privilege
Numeric Value
user_xprivileges
None
0
Config Audit
8
Purge Audit
16
Config and Purge Audit
24
View Audit
32
Config and View Audit
40
View and Purge Audit
48
Config, View and Purge Audit
56


aa

No comments:

Post a Comment