First, I want to say thank you for the timely response and great answer! However, I am having a few issues when attempting to run the code:

1. It's saying unexpected character '$,' which I believe has to do with not being on C# 6.0. The fix appears to be changing to String.Format, but since I am new to coding, I am having some troubles with this.
2. It's saying the name 'trusteeSid' does not exist in the current context. It also says this for the two 'session' names. Is there a way to test the code with a specific trustee SID so I can visualize what the script is doing?

Thanks again!

Do you have the Laserfiche SDK installed? The sample code requires a bit of knowledge about programming with the SDK. I suggest looking through the SDK documentation and sample code to familiarize yourself with signing in to Laserfiche.

For issue #1, replace the line with Console.WriteLine(String.Format("{0}", grp.AccountName);

For issue #2, trusteeSid is the SecurityIdentifier for the trustee whose groups are being looked up. The session variable is the RepositoryAccess session object that you get when your SDK application connects to the Laserfiche repository.

Here is a sample command line application that will report the group membership for all users in the repository:

static void Main(string[] args)
{
    try
    {
        string server = "servername"; // server name here
        string repository = "repositoryname"; // repository name here
        string username = "admin"; // username here, or blank for windows authentication
        string password = ""; // password here

        SecurityIdentifier EVERYONE_SID = new SecurityIdentifier("S-1-1-0");

        RepositoryRegistration rr = new RepositoryRegistration(server, repository);

        using (Session session = new Session())
        {
            if (!string.IsNullOrEmpty(username))
                session.LogIn(username, password, rr);
            else
                session.LogIn(rr);

            var trusteeList = new List<SecurityIdentifier>();
                    
            // Add Laserfiche repository accounts
            trusteeList.AddRange(Account.EnumUsers(session).Select(account => account.Sid));

            // Add windows accounts
            trusteeList.AddRange(Trustee.EnumAllWindowsAccounts(session).Select(account => account.Sid));

            // Add LDAP accounts
            trusteeList.AddRange(Trustee.EnumSecuredLdapAccounts(session).Select(account => account.Sid));

            foreach (var sid in trusteeList)
            {
                AccountReference acctRef = new AccountReference(sid, session);
                string accountName = acctRef.AccountName;

                if (acctRef.TrusteeType == TrusteeType.WindowsAccount && !acctRef.IsUser)
                    continue; // Don't retrieve groups for other groups

                Console.WriteLine(String.Format("Groups for {0}:", accountName));

                try
                {
                    EffectiveAccessTokenInfo tokenInfo = Trustee.GetEffectiveAccessTokenInfo(sid, session);

                    List<string> groupNames = new List<string>();
                    foreach (var groupSid in tokenInfo.Groups)
                    {
                        if (groupSid == EVERYONE_SID)
                            continue; // Ignore everyone group

                        AccountReference grp = new AccountReference(groupSid, session);
                        groupNames.Add(grp.AccountName);
                    }

                    if (groupNames.Count == 0)
                        Console.WriteLine("    <none>");
                    else
                    {
                        foreach (var groupName in groupNames)
                        {
                            Console.WriteLine(String.Format("    {0}", groupName));
                        }
                    }
                }
                catch (Exception ex)
                {
                    Console.WriteLine(ex.Message);
                }
            }
        }
    }
    catch (Exception ex)
    {
        Console.WriteLine(ex.Message);
    }

    Console.WriteLine("Done");
}

Hey Robert,

I don't think we have access to the Laserfiche SDK with our RIO package. Would we need the SDK to create a script in the Workflow Designer to perform this action? If that is the case, is there an alternative way to grab this information such as querying the database?

Thank you,

You don't need the SDK to use the SDK script activity in Workflow. However, the SDK documentation is only available when you purchase the SDK.

If you are using the code above in Workflow, you'll want to remove the parts where it establishes a connection to the repository on its own and replace all references to "session" with this.RASession to use the built-in connection the SDK script activity makes for you.

Hey Miruna,

I think I made the appropriate changes, but I am now getting these errors:

1    The type or namespace name 'SecurityIdentifier' could not be found (are you missing a using directive or an assembly reference?)

2    The type or namespace name 'SecurityIdentifier' could not be found (are you missing a using directive or an assembly reference?)

3    The type or namespace name 'SecurityIdentifier' could not be found (are you missing a using directive or an assembly reference?)

4    'Laserfiche.RepositoryAccess.AccountInfoReader' does not contain a definition for 'Select' and no extension method 'Select' accepting a first argument of type 'Laserfiche.RepositoryAccess.AccountInfoReader' could be found (are you missing a using directive or an assembly reference?)

5    'Laserfiche.RepositoryAccess.WindowsAccountReader' does not contain a definition for 'Select' and no extension method 'Select' accepting a first argument of type 'Laserfiche.RepositoryAccess.WindowsAccountReader' could be found (are you missing a using directive or an assembly reference?)

6    'Laserfiche.RepositoryAccess.LdapAccountReferenceReader' does not contain a definition for 'Select' and no extension method 'Select' accepting a first argument of type 'Laserfiche.RepositoryAccess.LdapAccountReferenceReader' could be found (are you missing a using directive or an assembly reference?)

I believe all the proper references have been added, but it appears that I am missing some things.

Thanks,