Help—Some DQL Queries

Some helpful queries related to object security are described in this section. These queries are based on the information presented in this chapter.

The following query retrieves basic permissions granted on a given object:

SELECT r_accessor_name, r_accessor_permit
FROM dm_acl
WHERE object_name =
(SELECT acl_name
FROM dm_document
WHERE r_object_id = '0900006480000509')
AND owner_name =
(SELECT acl_domain
FROM dm_document
WHERE r_object_id = '0900006480000509')

Note a few things in this query. DQL doesn't allow joins when retrieving repeating properties (accessor name and permit) — this query achieves the same effect using subqueries. Also note that both acl_name and acl_domain should be checked when looking up the ACL for an object.

It is not straightforward to check extended permissions through queries since they return an integer value that needs to be decoded. It is best to view extended permissions through an application such as Webtop or Documentum Administrator...