Author Topic: ARSXML Update User Admin vs System Admin  (Read 2406 times)

ODSA

  • Jr. Member
  • **
  • Posts: 13
    • View Profile
ARSXML Update User Admin vs System Admin
« on: May 06, 2020, 03:28:56 PM »
Hi, I am trying to update permission for a user id (trying to add AG and folder) by using ARSXML udpate command. My ID is defined as User Admin in OnDemand and when I use my id to run an ARSXML update, I get an error that AG doesn't exist but when I run the it as System Admin it updates the permission for that user.

below is my input XML

<?xml version="1.0" encoding="UTF-8"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:noNamespaceSchemaLocation="/opt/IBM/ondemand/V9.5/xml/ondemand.xsd">
<user
             name="mmtest"
         />
<applicationGroup name="TESTAG">

       <permission user="mmtest" authority="Access" docViewPerm="Yes" docPrintPerm="Yes" docCopyPerm="Yes" annotViewPerm="Yes" annotAddPerm="Yes"/>

       </applicationGroup>
<folder name="TESTFOLDER">

  <permission user="mmtest" accessAuthority="Yes" maxHits="No Limit" />

  </folder>
</onDemand>

Am I missing any settings when I am setup myself as User ADMIN ?

Thanks !!

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2138
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
Re: ARSXML Update User Admin vs System Admin
« Reply #1 on: May 07, 2020, 03:43:29 AM »
Sounds like a bug.  I'd expect you to be able to perform tasks you're authorized to do.  If the same file works under an account with SysAdmin privileges, then it's not a problem with the file.  Time to open a service request.  :)

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

Ed_Arnold

  • Hero Member
  • *****
  • Posts: 1144
    • View Profile
Re: ARSXML Update User Admin vs System Admin
« Reply #2 on: May 07, 2020, 07:25:24 AM »
I can't say whether it's a bug or not but here's sample XML that I used to update a permission:

********************************* Top of Data **********************
<?xml version="1.0" encoding="IBM-1047"?>                           
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"     
                xsi:noNamespaceSchemaLocation="../ondemand.xsd">   
                                                                   
<!--                                                               
   This XML file updates the information for some users.           
   This file should be used during an arsxml update.               
 -->                                                               
 <applicationGroup name="TSKTSK">                                   
 <permission user="SAMPLEUSER1" task="update" docDeletePerm="true"/>
</applicationGroup>                                                 
                                                                   
                                                                   
</onDemand>                                                         
******************************** Bottom of Data ********************


I got that syntax somewhere in the manuals are the schema defs for this stuff.

Note the "task=xxx" and how you say "true" to flip the permission.

Ed
« Last Edit: May 07, 2020, 07:27:35 AM by Ed_Arnold »
#zOS #ODF

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2138
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
Re: ARSXML Update User Admin vs System Admin
« Reply #3 on: May 07, 2020, 07:57:40 AM »
I just took a closer look at the XML - maybe the problem is that you're making a folder-related change?  As a User Admin, you might not be able to make changes to a folder definition, even if the thing you're changing is specifically a user permission?  I don't think you can exempt a user from the maximum number of hits defined at the folder level.

IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

ODSA

  • Jr. Member
  • **
  • Posts: 13
    • View Profile
Re: ARSXML Update User Admin vs System Admin
« Reply #4 on: May 07, 2020, 10:59:37 PM »
Hi Ed,
I tried using task="update", in this case, it didn't help, I am still getting the same error.

Hi Justin,
I tried by removing folder update with below xml, I am now trying to just add AG to a user, I still get the same error:-

Updated XML file
<?xml version="1.0" encoding="UTF-8"?>
<onDemand xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                xsi:noNamespaceSchemaLocation="/opt/IBM/ondemand/V9.5/xml/ondemand.xsd">
<user
             name="mmtest"
         />
<applicationGroup name="TESTAG">

       <permission task="update" user="mmtest" authority="Access" docViewPerm="Yes" docPrintPerm="Yes" docCopyPerm="Yes" annotViewPerm="Yes" annotAddPerm="Yes"/>

       </applicationGroup>
</onDemand>


$ arsxml update -h hostname -u user -p password -i add32.xml
ARS6822I Attempting login for userid 'user' on server 'host' ...
ARS7744E A applicationGroup object named 'TESTAG' does not exist.

Justin Derrick

  • IBM Content Manager OnDemand Consultant
  • Administrator
  • Hero Member
  • *****
  • Posts: 2138
  • CMOD Guru for hire...
    • View Profile
    • Tenacious Consulting
Re: ARSXML Update User Admin vs System Admin
« Reply #5 on: May 08, 2020, 06:25:52 AM »
I suspect you need the Application Group permission in order to add users to an App Group.

I just reviewed the online help in the CMOD Admin Client, and it sounds like you'll need the Application Group / Folder administration authority.

-JD.
IBM CMOD Professional Services: http://TenaciousConsulting.com
Call:  +1-866-533-7742  or  eMail:  jd@justinderrick.com
IBM CMOD Wiki:  https://CMOD.wiki/
FREE IBM CMOD Education & Webinars:  https://CMOD.Training/

Interests: #AIX #Linux #Multiplatforms #DB2 #TSM #SP #Performance #Security #Audits #Customizing #Availability #HA #DR

Ed_Arnold

  • Hero Member
  • *****
  • Posts: 1144
    • View Profile
Re: ARSXML Update User Admin vs System Admin
« Reply #6 on: May 08, 2020, 06:49:29 AM »
Also you need to ensure what ever you're trying to do fits in with this:

Objects and data model used in the Content Manager OnDemand XML file

https://www.ibm.com/support/knowledgecenter/en/SSEPCD_10.1.0/com.ibm.ondemand.administeringmp.doc/objecxml.htm

Yes, going through that doc can be a bit painful.

Ed
#zOS #ODF

ODSA

  • Jr. Member
  • **
  • Posts: 13
    • View Profile
Re: ARSXML Update User Admin vs System Admin
« Reply #7 on: May 09, 2020, 07:51:50 PM »
Hi Justin,
Assigning Application Group / Folder administration authority to my user id did the trick. :) Thanks !!

Hi Ed,
This is a useful link, thanks for sharing. Thank you!!

Thanks,
Shivani
« Last Edit: May 09, 2020, 07:55:03 PM by ODSA »