Professional Documents
Culture Documents
A permission set that contains one or more alias references to users or groups in the r_accessor _name property is known
as permission set template.
Permission set templates (also known as ACL template) is created only using DAB .
The type of permission set is identified by dm_acl.acl_class.
Note:
When you create a new DocApp, DAB creates a default alias set for it. Unless you have a specific reason for doing
otherwise, EMC | Documentum recommends that you use this set for all aliases pertaining to the DocApp. If you specify
another alias set as the default alias set, make sure that you have the same aliases in the new alias set.
Internal implementation
12
Note that custom attributes are not examined by content server for the presence of aliases.
Application (Custom code) can examine custom attributes and provide a resolution mechanism.
Content server resolves the alias references in certain properties of certain types of objects.
Dening aliases
%[
alias_set_name
.]
alias_name
alias_set_name identifies the alias set object that contains the specified alias name. This value is the object_name of the
alias set object.
Including alias_set_name is optional.
alias_name
specifies one of the values in the alias_name attribute of the alias set object.
Resolving Aliases
When a real value is substituted for a placeholder, the alias is set to be resolved.
The alias scopes define the boundaries of the search when the server resolves an alias specification.
If the alias specification includes an alias set name, the alias scope is the alias set named in the alias specification. The
server searches that alias set object for the specified alias and its corresponding value.
If the alias specification does not include an alias set name, a sequence of alias sets is searched or the server resolves the
alias by searching a pre-determined, ordered series of scopes for an alias name matching the alias name in the
specification. Which scopes are searched depends on where the alias is found.
The content server follows different approaches for alias resolution in the following situations:
1. A workflow activity needs to be started and its performer refers to an alias
2. A sysobject is saved
3. The DFC link or unlink method is invoked
4. A permission set template is attached to an object
Resolving aliases when the workflow is started requires user interaction. The person starting the workflow provides alias
values for any unpaired alias names in the workflow definition’s alias set.
A workflow definition can include an alias set to be used to resolve aliases found in the workflow’s activities.
12
When the workflow is instantiated, the server copies the alias set and attaches the copy to the workflow object
by setting the workflow’s r_alias_set_id attribute to the copy’s object ID.
The alias set can have alias names that have no corresponding alias values.
Including an alias set with missing alias values in the workflow definition makes the definition a very flexible workflow
template. It allows the workflow’s starter to designate the alias values when the workflow is started.
If the workflow is started through the Workflow Manager (WFM), the WFM prompts the starter for alias values for the
missing alias names. The server adds the alias values to the alias set copy attached to the workflow object.
If the workflow is started through a custom application, the application must prompt the workflow’s starter for the absent
alias values and add them to the alias set.
The sequence of alias scopes searched is dependent on the value of the resolve_type property of the acticity.
12
0 – normal resolution path – default sequence
1 – alias set associated with incoming package
2 – alias set associated with user or group
The server uses the default resolution algorithm when the activity’s resolve_type attribute is set to
0.
2. The alias set present in the session, i.e., non-persistent session config object – alias_set
4. The alias set of the default group of the performer of the previous activity
12
12
12
12
The package resolution algorithm
The server uses the package resolution algorithm if the activity’s resolve_type attribute is set to 1. The algorithm searches
only the package or packages associated with the activity’s incoming ports. Which packages are searched depends on the
setting of the activity’s resolve_pkg_name attribute.
If the resolve_pkg_name attribute is set to the name of a package, the server searches the alias sets of the package’s
components. The search is conducted in the order in which the components are stored in the package.
If the resolve_pkg_name attribute is not set, the search begins with the package defined in r_package_name[0]. The
components of that package are searched. If a match is not found, the search continues with the components in the
package identified in r_package_name[1]. The search continues through the listed packages until a match
is found.
12
12
The user resolution algorithm
The server uses the user resolution algorithm if the activity’s resolve_type attribute is set to 2. In such cases, the search is
conducted in the following scopes:
• The alias set defined for the user performer of the previous work item
• The alias set defined for the default group of the user performer of the previous work item.
The server first searches the alias set defined for the user. If a match isn’t found, the server searches the alias set defined
for the user’s default group
12
Resolution errors
:
• Generates a warning
• Posts a notification to the inbox of the workflow’s supervisor
• Assigns the work item to the supervisor
12
Resolving aliases in SysObjects
The server resolves an alias in a SysObject when the object is saved to the repository for the first time.
• The server first searches the alias set defined in the object’s r_alias_set_id attribute.This is the lifecycle scope.
• The server looks next at the alias set object defined for the session scope. Alias_set
• The server looks at the alias set defined for the user scope. dm_user.alias_set_id
• The server looks at the alias set defined for the user’s default group scope. . dm_group.alias_set_id
• The server looks at the alias set defined for the system scope. dm_server_config.alias_set_id
12
Resolving aliases in template ACLs
When a permission set template is assigned to an object, a copy of the permission set template is created, the alias
references in the accessor names are resolved, and references are replaced with actual values. Finally, this copy of the
permission set is assigned as a custom permission set to the object.
The sequence of alias sets examined in the resolution process depends on whether a lifecycle has been applied to the
object.
The server uses the following algorithm to choose a default lifecycle scope:
1. Check if alias_set in session config is present in dm_policy.alias_set_ids for the lifecycle. If found use this,
otherwise continue.
2. Check if dm_user.alias_set_id for the current user is present in dm_policy.alias_set_ids for the lifecycle. If found
use this, otherwise continue.
3. Check if dm_group.alias_set_id of the default group for the current user is present in dm_policy.alias_set_ids for
the lifecycle. If found use this, otherwise continue
4. Check if dm_server_config.alias_set_id for the server configuration is present in dm_policy.alias_set_ids for the
lifecycle. If found use this, otherwise continue
5. Use the alias set specified by dm_policy.alias_set_ids[0]. Also knows as the default alias set of the lifecycle.
If the policy object has no defined alias set objects in the alias_set_ids attribute, the SysObject’s r_alias_set_id attribute is
not set.
12
Specifying an alias object in an alias set
You arrive at the Alias Object dialog when adding or editing a line in the alias set editor.
12
for the current Docbase.
4. To require the installer to prompt for a value for this alias at installation, check the checkbox.
5. Specify an alias category and description. Alias category is a tool for developers to use to organize the aliases in their
DocApps. EMC | Documentum software does not use this field.
Note:
If you are using either a user or group alias in a workflow template, do not select the
User or Group alias
type—you must select either the User alias type or the
Group alias type. Workflow Manager cannot resolve the User or
Group alias type for the
Specific User ,All Users in Group , or
Single User From Group performer options when the
workflow initiator is prompted to specify the performer.
12
5. Click
Close , and then click the
Close
button of the DocApp’s Properties dialog box.
6. For your aliases to be resolved correctly, add the missing aliases to the new default alias set.
12