B.1 Content Server Changes

A few of the changes/enhancements made to Content Server in release 5.3 are:

• Documentum has replaced Verity with Fast Search & Transfer™ (FAST™) as its new search infrastructure.

• A separate index agent and an index server are required in 5.3 for handling full-text indexing. While an index agent exports and prepares the documents in a Docbase repository for full-text indexing, the index server creates and maintains the full-text indexes and provides responses to Content Server full-text queries.

• Each repository requires its own index agent and index server.

• In the new full-text indexing environment, all attributes of SysObjects and their custom subtypes are indexed. The content files associated with all the SysObjects are indexed as well and case-sensitive searching is not supported by Documentum in 5.3.

• In order to improve query performance, Documentum has introduced a new querying ability: FTDQL SELECT with syntax that is a subset that of a SELECT statement. Using an FTDQL SELECT statement ensures that the query is executed against the full-text index rather than Docbase repository to achieve performance gains.

  Figure B.1: Execution of FTDQL and ordinary SELECT statements

• A Trusted Content Services license is not required in order to control SSL communication between Content Server and client libraries. This feature is available in the standard Content Server package.

• Enhancements have been made to ACLs (Access Control Lists) to provide better object-level permissions.

• Apart from the five extended permissions shown in the table in figure 3.4 of Chapter 3, Documentum has provided an additional extended permission for deleting an object.

• This new extended permission is different from the basic Delete permission in that it does not provide hierarchical Browse, Read, Relate, Version, or Write access.

  Apart from specifying the access permissions for basic and extended permissions, Documentum provides an ability to restrict these permissions as well in 5.3. There are two Access Restriction entries: AccessRestriction for restricting certain basic permissions and ExtendedRestriction for restricting certain extended permissions.

  The following example of an ACL on a document belonging to the HR department in an organization explains the utility of this feature:

  HR_ACL

  Group name: HR_Department

  • Permit Type: AccessPermit

  • Permission Level: Delete

  Group name: HR_Department_subgroup

  • Permit Type: AccessRestriction

  • Permission Level: Write

  This ACL generically provides Delete access to the HR department group, but does not allow a particular subgroup within this HR department to update or delete the document. By using AccessRestriction, the system allows this sub-group to only browse, read, relate (annotate), and version the document

• Flexibility to create groups as Dynamic Groups: A Dynamic Group allows your application to find out whether the users specified in the group's membership list are considered members of this group or not by default when they establish a connection with the Docbase repository.

  Say for example you assign a group abc as a Dynamic Group, setting its default membership behavior to treat its users as not members of this group. In the event of a user accessing the Docbase repository from a secure application, your application could add this user to the group but if the access is from a non-secure application, this user is not added to the group. Thus, using Dynamic Groups can assist you in setting up a group (or a role-based) security.

• Java programs have been supported in lifecycle Entry Criteria, Actions, Post Change, and for validation purposes.

• Improvements in workflows, such as support for work queues and a workflow timer for automatically resuming the suspended activities.

• Support for Global Login Tickets.

• Login Tickets are ASCII-encoded strings used by applications in place of a user's password while establishing a connection with the Docbase repository. A Global Login Ticket is an extension to this; it is a Login Ticket that can be accepted by any server of a trusted Docbase repository.

• The verity_locale key in server.ini file has become obsolete and the verity_location attribute in dm_server_config object type has been deprecated in the 5.3 release.

• Introduction of Privileged Groups in the system: Members of these system groups have special privileges for performing specific operations that they do not individually have.

  Example: Members of the dm_browse_all group have the privilege to browse all the objects in the Docbase repository.