EndUser access to getUsers with option against other user attributes?

Question

Howdy,
I am trying to allow an end user to select their account name during our account claiming process. I am running into a problem validating their selected username. I am using a call to getUsers with QueryOptions based on their account name and Uname attributes. (we are storing our username in an attribute called Uname). This works when I run the rule in BPE as my admin user. However, during the account claiming process, the rule is executing from the claim username form, and the end user is logged. Since the getUsers runs against the context of the logged in user, my queries are not able to see other users when they query for the name or Uname. There for the same queries are coming back false for the end user, but true for the admin. I'm assuming I need to run the rule as an admin to fix the problem. I added the following RunAsUser entry to the rule:
<Rule name='alreadyExists'>
<Description>This rule checks to see if a username is already being used by the system.</Description>
<Comments>It returns true if the username already exists, false if the username&#xA;does not exist.</Comments>
<RuleArgument name='potentialName'>
<Comments>The potential username.</Comments>
</RuleArgument>
<RunAsUser>
<ObjectRef type='User' id='#ID#Configurator' name='Configurator'/>
</RunAsUser>
<block name='outer-check' trace='true'>
<cond>
<eq>
<ref>potentialName</ref>
<null/>
</eq>
<i>0</i>
<block name='compairison' trace='true'>
<defvar name='queryOptionsOne'>
<new class='com.waveset.object.QueryOptions'/>
</defvar>
<defvar name='queryOptionsTwo'>
<new class='com.waveset.object.QueryOptions'/>
</defvar>
<invoke name='addCondition'>
<ref>queryOptionsOne</ref>
<s>Uname</s>
<ref>potentialName</ref>
</invoke>
<invoke name='addCondition'>
<ref>queryOptionsTwo</ref>
<s>name</s>
<ref>potentialName</ref>
</invoke>
<or>
<neq>
<invoke name='getUsers' class='com.waveset.ui.FormUtil'>
<ref>context</ref>
<ref>queryOptionsOne</ref>
</invoke>
<null/>
</neq>
<neq>
<invoke name='getUsers' class='com.waveset.ui.FormUtil'>
<ref>context</ref>
<ref>queryOptionsTwo</ref>
</invoke>
<null/>
</neq>
</or>
</block>
</cond>
</block>
</Rule>
But it still isn't working. Is there something else I should be doing?

Answer 1

Hi Jim,
your problem is caused by the fact that runAs rules do not switch their context in all cases. It has been that way since LH 4.0. I'm afraid that the only work around that i am aware of (other then giving redicilus rights to end users) is to use unsuported API.
<invoke name="getCache">
  <invoke name="getServer" class="com.waveset.server.Server"/>
</invoke>gives you an instance of object cache (com.waveset.object.ObjectCache) without any limitations. I'm to lazy right now to test your case but with an object cache in server context you should be able to do searches without restrictions. For example have a look at
getObjects(Type type, java.util.List attrConds)
which looks ok for your intend.
Regards,
Patrick
Message was edited by:
Patrick.Wehinger