CMIS ACL Modification

A network access control list (ACL) is made up of rules that either allow access to a computer environment or deny it. In a way, an ACL is like a guest list at an exclusive club. Only those on the list are allowed in the doors. This task is meant to be used with a CMIS Repository connection. It will use the Repository Document id, and gather the current ACL for the document. It will then generate a new ACL based on the parameters. This task establishes a session upon initialisation, and keeps it open until the job run is complete.

The principal lists are pipe (|) delimited, to account for LDAP style principals. You will need to know the exact principal ids of the ACEs (Access Control Entries). The task works by cycling through the current ACEs and a series of if-then logic to construct a new ACL.

Note:  CMIS does not work with FileNet


Configuration

To use this task go to the task tab in your job. Select the task from the drop down and click the plus circle to configure the task. Click done after making any changes to save.

Condition check

It will execute the task when the condition's result is 'true', 't', 'on', '1', or 'yes' (case-insensitive), or run on all conditions if left empty. This condition is evaluated for each document, determining whether the task should be executed based on the specified values.

Example: If I only want to run this task for PDF documents I would use the expression: equals('#{rd.mimetype}',"application/pdf")

User name

CMIS server user name

Password

CMIS server password

Connection URL

CMIS server url

Repository ID

CMIS repository ID

Pipe (|) delimited list of principals to ignore from each document

A list of principals to ignore and not add modifications to. The 'ignore' list will bypass any modification to a matching ACE and add it directly back to the new ACL.

Pipe (|) delimited list of principals to remove from each document

A list of principals to be removed from the ACL. The remove list will skip over a matching ACE, leaving it out.

Comma delimited list of principals to add to each document

A list of principals to be added to the ACL. The add list is checked separately and will generate a new ACE will the selected permissions.

Permission to add to the principals

Not ignored ACEs and added ACEs will have this permission added to them in the ACL.

  • Read

  • Write

  • All


API Keys

Processor: CMISACLModificationTask

Key

Display Name

Type

use_condition Check a condition before executing this task. Boolean

task_condition

Condition

String

task_stop_proc

Stop Processing

Boolean

user

User Name:

String

pass

Password:

String

url

Connection URL:

String

repository

Repository ID:

String

ignore_names

Pipe (|) delimited list of principals to ignore from each document

String

remove_names

Pipe (|) delimited list of principals to remove from each document

String

Add_names

Comma delimited list of principals to add to each document

String

add_perm

Permission to add to principals

String