api question - folder permissions

[tmorsi]

Hi All,

Wondering if anyone knows how to,
given a username & password,
how to check if that user has permission to
access a particular folder or project.

any help is much appreciated
thnks

 

[appnair]

I am not sure if I understand the qn.If you have the lapi user's userid/password would not trying to access the object give you what you are looking for(it should throw an error saying eaxctly that).Otherwise if you do have SA privileges you can try impersonation of the user as well.
If you have SA privileges then you can get the Object's rights or ACL and see if the user or group is nested in there somehow.That is how Livelink figures out whether the login user has permissions(it is a bitmask) on the object.

Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937

Certified OT Developer and probably certfiable,Livelink ECM Champion 2008

 

[tmorsi]

thanks for the reply,

what my requirements are is that I will be given many usernames and passwords and i need to return a project
structure view (aka a tree view in xml format) but the view
needs to be pruned where the user would not have access to see.

but the main thing is, I have a username and password and need to figure out how to determine if he/she has at minimum view rights on a particular object.

so the end result is, a client gives me a username/psswrd and i return to them a partial or full view of a project's structure based on that user's permissions.

 

[appnair]

I don't know but I think with lapi you can do xmlexport with your userid and password,this would give you the xml data structure for the logged in user with any permissions taken care of for you.Would that work ?

Maybe post in KB for some help

Well, if I called the wrong number, why did you answer the phone?
James Thurber, New Yorker cartoon caption, June 5, 1937

Certified OT Developer and probably certfiable,Livelink ECM Champion 2008

 

[tmorsi]

thanks for the reply,

well for right now I am exploring the: GetObjectRights(...)
which returns rights for a particular object.

I am trying to go through the output of the GetObjectRights(.) call and see if there is a way find all the users of an object and go through the list to see if my username is in there. but having trouble figuring out how to use the api ...

thanks, but perhaps created a new LLSession using the given username & password & try to access the folder or project and see if it rejects it might be the easiest way to go but i'll try to do it the legit way first