Removing All Explicitly Assigned Security Rights From a Branch of the Repository's Folder Tree Structure.

March 29, 2006 | KB: 1011156
Laserfiche Server - Team (MSDE) 7, Laserfiche Server - United (MS SQL) 7

Summary

The Propagate Rights option replaces all explicitly assigned entry access rights on all children entries of the selected folder. This option can drastically change the security setup of your Laserfiche repository with no simple method of undoing the change. The following SQL script will start at a specified folder and simply remove all explicitly assigned entry access rights from all subfolders and documents that reside below the specified folder. Be aware that this script cannot specifically restore any explicitly assigned entry access rights that existed prior to you using the Propagate Rights option.

Workaround

Download and run the following SQL script to clear out all explicitly assigned security rights from a branch of your repository's folder tree structure.

To remove explicitly assigned rights from a portion of the folder tree

  1. Click the following link to download a zip file containing subtree-acl-remove.sql.
    subtree-acl-remove.zip
  2. Extract subtree-acl-remove.sql to a temporary location.
  3. Using a text editor, open subtree-acl-remove.sql.
  4. Locate the following line:

    SET @root = REPLACE_WITH_TOCID_OF_TOP_OF_SUBTREE

  5. Replace REPLACE_WITH_TOCID_OF_TOP_OF_SUBTREE with the TocID of the folder on which you performed the Propagate Rights option. You can view the TocID of a folder by configuring the folder browser to display the Entry ID column or you can view the properties of the folder and click More to view additional information. The updated line should look similar to the following:

    SET @root = 1234

  6. Save your change.
  7. Click Start and then click Run.
  8. Type the following and press ENTER:

    cmd

  9. At the command prompt, type the following:

    osql -E -S ServerName -d "DatabaseName" -i "ScriptPath"

    where ServerName is the name of your SQL server, DatabaseName is the name of the SQL database associated with the Laserfiche repository you want to modify, and ScriptPath is the full path (including the file name and extension) to the extracted subtree-acl-remove.sql file.
  10. Press ENTER.