OnDemand User Group
Support Forums => Other => Topic started by: ODSA on May 06, 2020, 03:28:56 PM
-
Hi, I am trying to update permission for a user id (trying to add AG and folder) by using ARSXML udpate command. My ID is defined as User Admin in OnDemand and when I use my id to run an ARSXML update, I get an error that AG doesn't exist but when I run the it as System Admin it updates the permission for that user.
below is my input XML
<?xml version="1.0" encoding="UTF-8"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="/opt/IBM/ondemand/V9.5/xml/ondemand.xsd">
<user
name="mmtest"
/>
<applicationGroup name="TESTAG">
<permission user="mmtest" authority="Access" docViewPerm="Yes" docPrintPerm="Yes" docCopyPerm="Yes" annotViewPerm="Yes" annotAddPerm="Yes"/>
</applicationGroup>
<folder name="TESTFOLDER">
<permission user="mmtest" accessAuthority="Yes" maxHits="No Limit" />
</folder>
</onDemand>
Am I missing any settings when I am setup myself as User ADMIN ?
Thanks !!
-
Sounds like a bug. I'd expect you to be able to perform tasks you're authorized to do. If the same file works under an account with SysAdmin privileges, then it's not a problem with the file. Time to open a service request. :)
-JD.
-
I can't say whether it's a bug or not but here's sample XML that I used to update a permission:
********************************* Top of Data **********************
<?xml version="1.0" encoding="IBM-1047"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="../ondemand.xsd">
<!--
This XML file updates the information for some users.
This file should be used during an arsxml update.
-->
<applicationGroup name="TSKTSK">
<permission user="SAMPLEUSER1" task="update" docDeletePerm="true"/>
</applicationGroup>
</onDemand>
******************************** Bottom of Data ********************
I got that syntax somewhere in the manuals are the schema defs for this stuff.
Note the "task=xxx" and how you say "true" to flip the permission.
Ed
-
I just took a closer look at the XML - maybe the problem is that you're making a folder-related change? As a User Admin, you might not be able to make changes to a folder definition, even if the thing you're changing is specifically a user permission? I don't think you can exempt a user from the maximum number of hits defined at the folder level.
-
Hi Ed,
I tried using task="update", in this case, it didn't help, I am still getting the same error.
Hi Justin,
I tried by removing folder update with below xml, I am now trying to just add AG to a user, I still get the same error:-
Updated XML file
<?xml version="1.0" encoding="UTF-8"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="/opt/IBM/ondemand/V9.5/xml/ondemand.xsd">
<user
name="mmtest"
/>
<applicationGroup name="TESTAG">
<permission task="update" user="mmtest" authority="Access" docViewPerm="Yes" docPrintPerm="Yes" docCopyPerm="Yes" annotViewPerm="Yes" annotAddPerm="Yes"/>
</applicationGroup>
</onDemand>
$ arsxml update -h hostname -u user -p password -i add32.xml
ARS6822I Attempting login for userid 'user' on server 'host' ...
ARS7744E A applicationGroup object named 'TESTAG' does not exist.
-
I suspect you need the Application Group permission in order to add users to an App Group.
I just reviewed the online help in the CMOD Admin Client, and it sounds like you'll need the Application Group / Folder administration authority.
-JD.
-
Also you need to ensure what ever you're trying to do fits in with this:
Objects and data model used in the Content Manager OnDemand XML file
https://www.ibm.com/support/knowledgecenter/en/SSEPCD_10.1.0/com.ibm.ondemand.administeringmp.doc/objecxml.htm
Yes, going through that doc can be a bit painful.
Ed
-
Hi Justin,
Assigning Application Group / Folder administration authority to my user id did the trick. :) Thanks !!
Hi Ed,
This is a useful link, thanks for sharing. Thank you!!
Thanks,
Shivani