Create a new group:
create,c,dm_group set,c,l,group_name <group_name> set,c,l,group_display_name <Group Display Name> set,c,l,group_class group set,c,l,owner_name <group_owner_name> set,c,l,description <Group Description> set,c,l,group_admin <group_admin_name> save,c,l
Create a new ACL:
create,c,dm_acl set,c,l,object_name <acl_name> set,c,l,owner_name dm_dbo set,c,l,description <ACL Description> grant,c,l,'dm_owner',7 save,c,l
Retrieve a group:
retrieve,c,dm_group where group_name='<name_of_group>'
Retrieve an ACL:
retrieve,c,dm_acl where object_name='<name_of_acl>'
Grant permissions on an ACL:
You run the grant or revoke permissions after you have retrieved the acl using the retrieve command. The ‘l’ in an api command after the ‘c’ refers to the last object retrieved/fetched.
grant,c,l,'dm_world',7
The numbers represent the level of permission as given below:
- NONE (1): A user with NONE access has no access to the object, which means the object is not shown to this user in any application and is not returned as a result of a query run by this user.
- BROWSE (2): A user with BROWSE access can see the attributes of an object, but is not allowed to view the content. The user can see the object within the folder it is in, and see it in query results.
- READ (3): A user with READ access can view the attributes and content of a document, but can not modify it or it’s properties.
- RELATE (4): A user with RELATE access can view the attributes and content and can annotate the content, but cannot modify the content itself.
- VERSION (5): A user with VERSION access can read, annotate, and create new versions of a document, but can not overwrite the document.
- WRITE (6): A user with WRITE access can read, annotate, version, and overwrite the current version, but can not delete it. A user with WRITE access can modify the attributes of a document without checking it out.
- DELETE (7): A user with DELETE permission can do all of the above, as well as delete the object. DELETE permission is the highest level of permission that a user can have on an object.
Revoke permissions on an ACL:
revoke,c,l'<user_or_group_name>'
Create a new folder:
create,c,dm_folder set,c,l,object_name <folder_name> set,c,l,acl_domain dm_dbo set,c,l,acl_name <acl_name> link,c,l,'/<cabinet_name>/<folder_name>' save,c,l
Create a new user:
create,c,dm_user set,c,l,user_name Admin1 set,c,l,client_capability 8 set,c,l,default_folder /Temp set,c,l,user_group_name ??? set,c,l,user_os_name Admin1 set,c,l,user_privileges 16 set,c,l,user_state 0 set,c,l,acl_name ??? set,c,l,acl_domain ??? save,c,l
Leave a comment