Acl Entry is not removed via KM API

Question

Hi,
I want to update or remove an ACL Entry for a user on a certain resource.
For ex. If for a resource A, User "User1" has READ permissions, now if I want to remove these read permissions for user "User1" on this resource A, I am not able to do so using KM API.
The code which i am using for this is
resourceInfo is of Type IResource.
// Get the Acl Security manager.
IAclSecurityManager aclSecurityManager = (IAclSecurityManager) returnResourceInfo.getRepositoryManager().getSecurityManager(resourceInfo);
// Get the resourceAcl manager.
IResourceAclManager resourceAclManager = aclSecurityManager.getAclManager();
// Get the resource Acl
IResourceAcl rACl = resourceAclManager.getAcl(resourceInfo);
Here i am not having any method which remove the Acl entry for the specific user ex. "User1".
Edited by: Lokesh Malik on Nov 13, 2008 9:57 AM
Edited by: Lokesh Malik on Nov 13, 2008 12:13 PM

Answer 1

HI Lokesh,
this might help,
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1070413a-29e7-2a10-cc81-cdc92cdd231b
but you have to take into account that the resource can inherit the acl from the folder, so
if the ResourceAcl is null, you can create an acl and assign the permissions you want for the resource.
IResourceAcl ra = ram.getAcl(resource);
               if(ra == null){
                    //"inherited permissions from the folder";
// instead of taking from the folder
//ra = ram.getInheritedAcl(resource);
// create your own acl                    
ra = ram.createAcl(resource);
ra.addOwner(resource.getContext().getUser());
// or whatever you need for this resource....
ra.removeOwner(<IUMPrincipal>);
Hope this helps
Regards
DV