OnDemand User Group

Support Forums => Other => Topic started by: ODSA on May 06, 2020, 03:28:56 PM

Title: ARSXML Update User Admin vs System Admin
Post by: ODSA on May 06, 2020, 03:28:56 PM

Hi, I am trying to update permission for a user id (trying to add AG and folder) by using ARSXML udpate command. My ID is defined as User Admin in OnDemand and when I use my id to run an ARSXML update, I get an error that AG doesn't exist but when I run the it as System Admin it updates the permission for that user.

below is my input XML

<?xml version="1.0" encoding="UTF-8"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:noNamespaceSchemaLocation="/opt/IBM/ondemand/V9.5/xml/ondemand.xsd">
<user
             name="mmtest"
         />
<applicationGroup name="TESTAG">

       <permission user="mmtest" authority="Access" docViewPerm="Yes" docPrintPerm="Yes" docCopyPerm="Yes" annotViewPerm="Yes" annotAddPerm="Yes"/>

       </applicationGroup>
<folder name="TESTFOLDER">

  <permission user="mmtest" accessAuthority="Yes" maxHits="No Limit" />

  </folder>
</onDemand>

Am I missing any settings when I am setup myself as User ADMIN ?

Thanks !!

Title: Re: ARSXML Update User Admin vs System Admin
Post by: Justin Derrick on May 07, 2020, 03:43:29 AM

Sounds like a bug.  I'd expect you to be able to perform tasks you're authorized to do.  If the same file works under an account with SysAdmin privileges, then it's not a problem with the file.  Time to open a service request.  :)

-JD.

Title: Re: ARSXML Update User Admin vs System Admin
Post by: Ed_Arnold on May 07, 2020, 07:25:24 AM

I can't say whether it's a bug or not but here's sample XML that I used to update a permission:

********************************* Top of Data **********************
<?xml version="1.0" encoding="IBM-1047"?>                           
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     
                xsi:noNamespaceSchemaLocation="../ondemand.xsd">   
                                                                   
<!--                                                               
   This XML file updates the information for some users.           
   This file should be used during an arsxml update.               
 -->                                                               
 <applicationGroup name="TSKTSK">                                   
 <permission user="SAMPLEUSER1" task="update" docDeletePerm="true"/>
</applicationGroup>                                                 
                                                                   
                                                                   
</onDemand>                                                         
******************************** Bottom of Data ********************

I got that syntax somewhere in the manuals are the schema defs for this stuff.

Note the "task=xxx" and how you say "true" to flip the permission.

Ed

Title: Re: ARSXML Update User Admin vs System Admin
Post by: Justin Derrick on May 07, 2020, 07:57:40 AM

I just took a closer look at the XML - maybe the problem is that you're making a folder-related change?  As a User Admin, you might not be able to make changes to a folder definition, even if the thing you're changing is specifically a user permission?  I don't think you can exempt a user from the maximum number of hits defined at the folder level.

Title: Re: ARSXML Update User Admin vs System Admin
Post by: ODSA on May 07, 2020, 10:59:37 PM

Hi Ed,
I tried using task="update", in this case, it didn't help, I am still getting the same error.

Hi Justin,
I tried by removing folder update with below xml, I am now trying to just add AG to a user, I still get the same error:-

Updated XML file
<?xml version="1.0" encoding="UTF-8"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:noNamespaceSchemaLocation="/opt/IBM/ondemand/V9.5/xml/ondemand.xsd">
<user
             name="mmtest"
         />
<applicationGroup name="TESTAG">

       <permission task="update" user="mmtest" authority="Access" docViewPerm="Yes" docPrintPerm="Yes" docCopyPerm="Yes" annotViewPerm="Yes" annotAddPerm="Yes"/>

       </applicationGroup>
</onDemand>


$ arsxml update -h hostname -u user -p password -i add32.xml
ARS6822I Attempting login for userid 'user' on server 'host' ...
ARS7744E A applicationGroup object named 'TESTAG' does not exist.

Title: Re: ARSXML Update User Admin vs System Admin
Post by: Justin Derrick on May 08, 2020, 06:25:52 AM

I suspect you need the Application Group permission in order to add users to an App Group.

I just reviewed the online help in the CMOD Admin Client, and it sounds like you'll need the Application Group / Folder administration authority.

-JD.

Title: Re: ARSXML Update User Admin vs System Admin
Post by: Ed_Arnold on May 08, 2020, 06:49:29 AM

Also you need to ensure what ever you're trying to do fits in with this:

Objects and data model used in the Content Manager OnDemand XML file

https://www.ibm.com/support/knowledgecenter/en/SSEPCD_10.1.0/com.ibm.ondemand.administeringmp.doc/objecxml.htm

Yes, going through that doc can be a bit painful.

Ed

Title: Re: ARSXML Update User Admin vs System Admin
Post by: ODSA on May 09, 2020, 07:51:50 PM

Hi Justin,
Assigning Application Group / Folder administration authority to my user id did the trick. :) Thanks !!

Hi Ed,
This is a useful link, thanks for sharing. Thank you!!

Thanks,
Shivani