KM Permissions based on MetaData

Hello,
I am wondering if there is any way to apply access permissions based on a metadata tag on a document. What I would like to do is see if there is a way to have a metadata property pre-defined which allows for a "level of access". For example, if we create a "classification" property with forced values of 1, 2 and 3, and set it as mandatory for all docs, is there any way to restrict access to the document such that 1 cannot, 2 cannot but 3 can (based on their respective classification)?
I know that the user has no specific "metadata" per say, but can we allow/disallow it VIA a mapping to the group they reside in from the UME?
Kind regards,
Judson

Hi Judson,
I think this would require custom development.
After creating a metadata / property in KM & to make it accessible in the Details -> Properties, the new property need to be added in the all_groups. But again this has no connection with the permissions at UME level.
Well this is what I can think of randomly:
1. Create the required metadata and add them in the appropriate groups.
2. Write a code which will extract the permissions at group level and then play around with switching the properties on/off.
Hope this helps.
All the best!
Warm Regards,
Ritu

Similar Messages

Is it possible to move documents to folder based on metadata by workflow?

We have a document library, which have several folders. We need a process so that documents are stored to the right place based on metadatas. Is this possible? Any better method for this?
1. User uploads a document and defines it as a "personnel" document in the metadata field.
2. Workflow(or another method) moves the document automatically under Folder "Personnel".
Kenny_I

Hi,
There is no OOB way to achieve this.
For more information, please check this thread:
http://social.msdn.microsoft.com/Forums/en/sharepointworkflow/thread/2a3c5e5b-4fb2-4d8a-8e1b-0d56d032fece
(it's the same as Moss 2007)
Hope this helps
Thanks!
Stanfford

Smart Album based on metadata

How do I create a smart album based on metadata content. I want to have one that has all my geo-tagged (latitude/longitude not blank) photos in it.
Dual G5/Dual G4/MacBook Pro Mac OS X (10.4.10) Extreme N/Apple TV/iPhone

You can't. Smart albums can only search by album, any text, comments, date, filename, keyword, rating, roll, title, aperture, camera model, flash, focal length ,iso and shutter speed. You'll need to use another way to group them together.
However, you can use the demo version of iView MediaPro to catalog your library, find all photos with or without a GPS location, add a keyword to it and then write that keyword to the original file. Then you can copy those files, from the iView catalog window to a folder on the desktop for imorting into iPhoto as new fileswhich will then recognize the new keyword. (While you're at it, you should sync all the metadata to the original files with iVMP as described in Tutorial #1. This will preserve the keywords in case the library gets damaged and you have to create a new one and import the original files from the old library. Then you can delete the un-keyworded files from the library with a smart album: keyword is not xxxx.
Do you Twango?
TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
I've written an Automator workflow application (requires Tiger), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.
MBP 2.16Ghz; G5 Dual Core 2GHz, 2G RAM ea, 250G HD; G4 Dual 1Ghz, 1.5G RAM; Mac OS X (10.4.10) 22" LCD, 710G FW HDs, Canon: SD700IS/i850/LIDE 50, Epson R200, 30G iPod, 2G Nano

BI-Permissions based on 1:n characteristic

Hi experts,
I've got the following scenario:
I've to process CRM-records in the BW-System.
The CRM-permission-model allows to permit all users which are assigned to a document (opportunity) via partner-roles.
In other words: If DocID 12345 has n users assigned to it, this n users shall be permitted to see that document.
In the BW-system the permissions are normaly based on the characteristics which are part of a record.
In this case the n assigned users cannot be part of the record, and there's no 1:1 relationshipt beween the document and the permisson-relevant users.
So, what is the best practice in such cases?
One idea would be to evaluate the permitted DocIDs on the fly (by joining against the an relationship-table DocID/Partners).
But that might lead to more than 2000 DocIDs which is too much for the sql-select.
Any hints or ideas how to solve this problem?
Thanks in advance,
best regards,
Marco

I did some testing and realized that the 2000-records problem obviously does not exist here.
But the number of values a user is permitted to seems to be stronly relevant for the runtime of the query:
If the user ist permitted to 2500 records, it takes 5s till the variable-screen is displayed - and another 10 till the report is done.
5000 records ---> 10s till var-screen, 33s till report.
10000 records ---> 35s till var-screen, 90s till report.
So the conclusion seems not to linear.
Best regards,
Marco

How to batch rename filenames based on metadata tags

// Hello,
I have a few hundred photos I need to batch rename pulling the info from the metadata caption tags (Each caption is unique).
What I need to do can happen just on export if necessary. I've tried Aperture 2 and Automator but no luck.
Any advice would be great. Thank you,
- Clint of THEY-design

I would like to batch rename all of the files (masters and versions) with a consecutive index (1, 2, 3, and so on).
Select the images in the project and then use ( from the main Aperture application menu)
Matadata -> Batch Change (Shift-Command-B)
Set the Version Name format to one of the "Custom with Index ..." or "Custom with Counter ..." formats and check "Apply to Master Files". Make sure you disable all other changes that you do not want, like Time Zone correction, or keywords.
Regards
Léonie

Create Crystal Report Dynamically using XML based design metadata

Hi,
I have a CR Report Development environment. Please refer to workflow and requirement description below;
I have a Java application(Report Customization Tool), which allows users to dynamically select structure and content for a report.
The process goes as follows:
1. In Java Application, user first gets option to select Report Header, Page Orientation, Font etc for master report.
2. User can select a sub-report (pre-developed report frames. Not Sure about tool.) and apply the same format option (mentioned in step 1, except orientation) to it.
3. User can select individual row/data cell to be displayed on the report through reference to DB tables in sub-reports.
4. There can be N number of sub-reports each with independant formatting, data and data layout that could be integrated in single report.
5 Once all selection is done, Java code generates an XML with all this info.
Now, my requirement is dynamically write CR report based on this XML. I am not using BO enterprise, hence RAS SDK is out of scope. This report will be called thorough stand-alone .NET application in CITRIX environment.
Can we do it in CR XI/CR 2008?
Please feel free to comment in case you need more info. But I won't be able to post screenshots. NDA of course!
Thanks in advance.

I moved your post to the NET - SAP Crystal Reports forum.
To start, you have a fair bit of work ahead of you. The Crystal reports SDK will not do the job. You will have to use the InProc RAS SDK which is included in both CR XI and CR 2008. I'd recommend going with CR 2008 as CR XI R1 (11.0) is out of support now and CR XI R2 (11.5) will be out of support come June of 2011. Next, make sure you have applied SP 3 for CR 2008:
https://smpdl.sap-ag.de/~sapidp/012002523100007123572010E/cr2008_sp3.exe
As an FYI, all files can be found on the downloads page:
http://service.sap.com/sap/bc/bsp/spn/bobj_download/main.htm
Next, you want to read up on RAS. I suggest the following:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/10b840c0-623f-2b10-03b5-9d1913866b32
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b050afe0-2fa5-2b10-658d-98f214ba6a4a
http://help.sap.com/businessobject/product_guides/boexir31/en/rassdk_net_dg_12_en.chm
Samples are here:
https://wiki.sdn.sap.com/wiki/display/BOBJ/NETRASSDK+Samples
and here:
http://www.sdn.sap.com/irj/boc/samples?rid=/webcontent/uuid/80774579-b086-2b10-db91-ed58c4dda375 [original link is broken]
I also find this 3rd party link useful:
http://book.soundonair.ru/sams/
And as always, search these forums. Lots of info here. E.g.;
Programaticaly add Table in CR database fields
InProc RAS Issue
Adding the columns dynamically in crystal report
Also, see the search box at the top right of this page. It searches blogs, wikis, Kbases, articles and more - all in one go.
Ludek
Follow us on Twitter http://twitter.com/SAPCRNetSup

How get codesource of caller in SecurityManager, change perms based on it?

I want to have a SecurityManager that does something like:
public void checkPermission(Permission perm)
      //Pseudo code
      if ( allowedList.contains( caller_context ) ) return;
      else
            //Pass to another SecurityManager object
            baseSecurityManager.checkPermission( perm );
}If I know what jar file the allowed code was loaded from how would I find out if the calling code's context is the same (from that jar or other jars I "OK" )?

Thanks for taking the time to help me on this! :)
* SecurityManager isn't designed for delegation to another SecurityManager. The variuos check* method may be overriden to allow extra permissions. If you don't delegate to the method that was originally called, you might miss something.I know that normally this is the case but the specs on this require it. :(
* The model is that every frame in the current AccesControlContext (acc) has the required permission. So you need to iterate through and throw when you find an unprivileged frame. This is what AccessControlContext.checkPermission does.Yeah, I was trying to iterate through the classes from getClassContext() but when i call getProtectionDomain(), it starts an endless loop.
* Use AccessController.getContext in preference to SecurityManag.getClassContext.Unfortunately, that doesn't help. You can't get at any of the classes/codesources/protectiondomain in the context. The only thing you can do is ask it if, according to it's internal algorithm, the permission is implied. I can't get any info about the calling class' codesource.
* (Since 1.4,) ProtectionDomain constructed with the four argument constructor are dynamic, and add permissions from the current Policy. This seems like what you want to do.Hmmm, there might be something here, but the problem is I don't think it will work as there will be an installed 3rd party SecurityManager that may or may not even pay attention to that. (I've been pretty surprised at the number of security manager implementations that don't check that stuff and simply return "OK")
* Source for SecurityManager and other classes is in src.zip of the JDK. SecurityManager.checkPermission, uses java.security.AccessController.Yeah, I checked this but it simply goes to native code which checks for info that's only available to Sun's JVm code.
Thanks again!

How do I restore permissions to amend Metadata and Keywords on Bridge?

I have just bought a new PC and reinstalled Bridge and CS6. On amending or adding Keywords or metadata to my existing images I receive an error message: 'There was an error writing Metadata to <Filename>.' It has appeared on .jpg , .tif and .cr2 alike.
What is the procedure for rectifying this?

Linc:
Very helpful suggestion and response, Thanks for pointing out that it is a permission issue. I am working through the issue and resolving my problem.

No values for refiners for managed properties based managed metadata columns in SharePoint 2013 on premise

On a SharePoint Server 2013 setup (on premise) we want to use a number of managed metadata columns in the search as refiner. The managed metadata column is called "Document Language" and so it automatically creates a managed property called owstaxidDocumentx002Language
which I can use to do a keyword query by typing owstaxiDocumentx0020Language:"NL" in the search box and it returns results. I also marked this managed property as refineable (in the service search application) and it appears in the
seach refiners selection box but it states that there are no values for this refiner.
So I decided to create a new managed search property "DocumentLanguage" and maps this to "ows_Document_x0020_Language" - I marked it as queryable, searchable, refineable, retrievable and sortable but this managed search property
is not being filled up.
I already executed a number of full crawls but this does not seem to work. Anyone know what to do next?
Rgds,
Joris [http://jopx.blogspot.com]

It happened with me many times that the automatically generated managed property is not properly mapped to the crawled property and to get the correct crawled property get the document item
$web=Get-SPWeb http://webUrl
$list=$web.Lists["documentLibrary"]
$list.Items[0].Xml>>item.xml
View the item.xml and check if the ows_Document_x0020_Language contains data
Hope that helps|Amr Fouad|MCTS,MCPD sharePoint 2010

Auto generate apex pages based on metadata

Dear All,
Is there a way where I can auto-generate pages in apex by providing some metadata?
Ex: If I provide all the metdata with which kind of items to be created for the attributes and pass it to apex, can it generate the pages automatically then?
Or, if this metadata can be converted into xml file which can be given as a input to apex and then, can it then auto-generate pages from there on wards?
With question much more simplified, Can the apex pages be generated dynamically??
Regards,
Krishna

Is there a way where I can auto-generate pages in apex by providing some metadata?
Ex: If I provide all the metdata with which kind of items to be created for the attributes and pass it to apex, can it generate the pages automatically then?
Or, if this metadata can be converted into xml file which can be given as a input to apex and then, can it then auto-generate pages from there on wards?
With question much more simplified, Can the apex pages be generated dynamically?? There are several ways to approach your question.
If you want to generate actual Apex pages through code, you can take a look at ApexGen:
http://code.google.com/p/apexgen/
If you just want to create dynamic pages (ie dynamic content on a page), just use one or more PL/SQL Regions on your page and render whatever you need on the page, possibly in combination with the APEX_ITEM package.
Also check out the new Apex 4 plugin architecture.
- Morten
http://ora-00001.blogspot.com

Variable data sets based on metadata

Can i use meta data as a variable in datasets? (i am an event photographer and have a apreadsheet with (racenumber,time,name) . I want to tag my photos using metadata with the race numbers and then have CS5 add text onto my photos by matching the racenumber from the meta data to the spreadsheet is this possible?

what is want ot do is this;
I take photos at marathons thousands of photos.
I want to tag all my photos with the athletes race number (BIB) as meta data.
Then i get a spread sheet containing the race timings (BIB,Name,Age,Time,Place)
i want photoshop to check the meta data on the photo (BIB) and then match that BIB with the one in the speadsheet and incert all the other data like Name,Age,Time,Place on to the photo.
This is so i can create personalised participation certificates for the marathons.
Is this possible?
I think one way would be to rename each file to the BIB number and then use a speadsheet to tell photoshop to insert Name,Age,Time,Place onto file 001.jpeg ; Name1,Age1,Time1,Place1 onto file 002.jpeg etc.

Admin Permissions based on Role

I would like to set up my AD so that members of my help desk can reset passwords for domain users and no one else. I would like my help desk to be able to add computers to the domain and to reset passwords. I have made a security group that allows
them to join computers to the domain but I do not see how to allow them to reset passwords without being able to reset everyone's passwords, i.e. higher administrators.
Any help would be appreciated.

Awesome didn't realize it was that easy. I did all that, now how does the helpdesk person access the console to change the password?
You need to install the admin tools on their boxes. Search the web for "RSAT" and download those tools, there is different packages for Windows 7/Windows 8
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog

Creating List with Lookups based on metadata

Good morning,
I have a large library with thousands of files that all have an Activity_Number & Doc_Classification. Each Activity_Number should have multiple files with Doc_Classification's "1","2" & "3" etc.
For audit reasons, I'm trying to create a list where I can paste Activity_Numbers into a column and bring back a lookup from the library with columns for each Doc_Classification 1, 2, 3 with a Yes it exists or No it doesn't.
Is this possible out of the box? I've managed to do a lookup for that Activity_Number and it pulls just a random Doc_Classification, but how can I get it to grab all of them?
Please help!
Thank you!

Yes its possible OOB but require little effort to update Activity_Number for all records. Follow below steps:
Create lookup column for Activity_Number in your document library
Now go to view all items of document library, click on library tab and then select Quick Edit (Excel view)
Select Activity_Number(old) and copy fields, and paste them in the Activity_Number lookup column.
Once you complete it, you can match the fields as now both fields will be showing same value (old and new)
Now you can delete the old field.
Adnan Amin MCT, SharePoint Architect | If you find this post useful kindly please mark it as an answer.

Can forms be assigned permissions based on certain users?

Is there a way to manage individual forms and set / allow only certain people to view the results of said forms? I would like to make forms that only certain managers in our company can view, and make changes too. Is that possible?

I have figured this little issue out....

Retrieving entire path of metadata column

To emulate document permissions based on metadata, I'm trying to create my own document routing logic through a workflow retrieving the value from a metadata column and moving the file to the appropriate folder. It works fine except for the fact that I'm
using a hierarchical term set for my metadata so I need the folder system to be two levels deep. Therefore I need to retrieve the full path for the metadata term. But I haven't found a way to do it!
If I have a document tagged Economics:Reports I need it to be moved to the Reports folder inside of the Economics folder, but I can only retrieve the term name "Reports". I've tried using the "TaxonomyHiddenList" and the Rest API, but
I guess I'm too ignorant to understand how to do it.
Can anyone please help me out or guide me if there is another way to solve it?

Hi,
How you are fetching info? and what is the display format of taxonomy field you are using?
i.e have you set taxonomy column setting to "display the entire path to the term in the field".?
Refer following link to set this option:
http://office.microsoft.com/en-in/sharepoint-server-help/site-column-types-and-options-HA010302196.aspx#_Toc277149837
Thanks,
Avni Bhatt

KM Permissions based on MetaData

Similar Messages

Maybe you are looking for