You are viewing limited content. For full access, please sign in.

Question

Question

Web client custom search syntax find files that are lacking specific security trustees

asked on July 25, 2023 Show version history
Laserfiche Web Client
11 (11.0.2304.16)

 

I need to find all files that trustees 'foo' and 'bar' do not have access to.

 

Since there are no fields in the Customer search filters for security trustees, i am having to write my search query through the search syntax using the '-' negation operator.

 

I am successfully able to find all files that are lacking a single trustee from my search with the following:

{LF:LOOKIN="\mainFolder"} 
& {LF:Name="*", Type="D"}
- {LFACE:trustee="foo"}

but I need to be able to find all files that are lacking more than 1 trustee ('foo' and 'bar') in an OR approach. (return a file if 'foo', 'bar', or both are not listed in its security trustees)

 

{LF:LOOKIN="\mainFolder"} 
& {LF:Name="*", Type="D"}
& {LFACE:trustee<>"foo"}

A single search for excluding 'foo' using the '<>' operator returned incorrect results that included 'foo' as a trustee.

 

I have unsuccessfully tried the following:

1.
{LF:LOOKIN="\mainFolder"} 
& {LF:Name="*", Type="D"}
- {LFACE:trustee="foo"} | {LFACE:trustee="bar"}

the results from this ^ include files that have both 'foo' and 'bar' (dont want those).

 

2.
{LF:LOOKIN="\mainFolder"} 
& {LF:Name="*", Type="D"}
-( {LFACE:trustee="foo"} | {LFACE:trustee="bar"} )

 

the results from this ^ are files that are lacking only both trustees (in an AND approach; does not include files that are only missing one of the trustees)

 

3.
{LF:LOOKIN="\mainFolder"} 
& {LF:Name="*", Type="D"}
- {LFACE:trustee="foo"} - {LFACE:trustee="bar"}


 same exact results as #2

 

Would greatly appreciate any suggestions to tinker the query to be able to return the desired results.

 

Thanks!

 

0 0

Replies

replied on July 25, 2023

Note that LFACE searches are specifically about rights assigned to an entry for a trustee, and don't answer the question "does user X have access to this entry". The latter depends on inheritance and group membership, and is out of the scope of what the search system has access to. It's possible that these questions are the same in your scenario, but in general they are not. See related discussion here https://answers.laserfiche.com/questions/126774/How-to-Search-By-Security .

2 0
You are not allowed to follow up in this post.

Sign in to reply to this post.