Grant and revoke privilages from command line interface

Question

hi all,
I have a lot of users that I need to give them a set of privileges to folders and containers of the repository, i thought that using the command line interface should help in loading a script.
i checked the manual for the syntax for such a command (i.e. to grant privileges) but i couldn't, searched the net and i didn't find anything.
So can we grant privileges from the command line interface and how ?
by the way is there anyway to create users from command line interface as well ?\
thanks in advance and have a good one

Answer 1

The granting of access rights cannot be done with a CLI script in Designer. Instead you have to use the Designer API Pl/Sql packages.
For detailed information, refer to the "API and Model Reference Guide", which is
installed with the Designer Repository Documentation, or can be found on OTN > Doco > Designer site.
Scroll through that document to the Reference section. You will need to read up on two topics at least: Workarea and Container Context, Privileges and Access Rights.
To grant rights, the easiest way is to grant them "just like some existing ones".
To do this, you'll need a Pl/Sql procedure with 5 input parameters:
1) the workarea context
2) the container to look at
3) the user to look like
4) the container to grant access to
5) the user to grant access for
The Pl/Sql procedure then needs to make a series of Repository API package calls to set context and get container IRIDs:
JR_CONTEXT.Set_Workarea (workareaname) - to set the context workarea
JR_CONTEXT.Set_Working_Folder (sourcefoldername) - to specify the source container
JR_CONTEXT.Working_Folder (sourcefolderid) - to get the ID of the source container
JR_CONTEXT.Set_Working_Folder (targetfoldername) - to specify the target container
JR_CONTEXT.Working_Folder (targetfolderid) - to get the ID of the target container
OR you can just do a couple queries after you set the WA CONTEXT such as ...
Select IRID from CI_Application_Systems where NAME = <sourcefoldername>
Select IRID from CI_Application_Systems where NAME = <targetfoldername>
Then you get the list of rights desired, and grant them back to the target user.
JR_ACC_RIGHTS.Get_Acc_Rights (sourcefolderid, sourceusername) > AccessList
[gets list of existing rights for some user on a container]
JR_ACC_RIGHTS.Grant_Priv_List (targetfolderid, targetusername, AccessList, Cascade? = TRUE)
[to set the list of rights for a user against the target container and its subcontainers]
There are other ACC_RIGHTS packages, like Grant_Priv, Revoke_Prive, Revoke_Priv_List, etc that you can use as well to build up a set of access management scripts.
Hope this helps