Mailing-List: contact dev-help@manifoldcf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@manifoldcf.apache.org
MIME-Version: 1.0
In-Reply-To: 
 <CAOODSfKCypbw5ONr6A-bAYicUqzdj60bPa=8EcQcTxoUKcDRLA@mail.gmail.com>
References: 
 <CAOODSfKCypbw5ONr6A-bAYicUqzdj60bPa=8EcQcTxoUKcDRLA@mail.gmail.com>
Date: Wed, 16 Sep 2015 14:53:24 -0400
Message-ID: 
 <CALUFAGC1m2-_2SQLWJgc1tJhe1A_V_8EVHtDjy+A0955FjMR_Q@mail.gmail.com>
Subject: Re: What is the proper way to filter documents based on tokens?
From: Karl Wright <daddywri@gmail.com>
To: dev <dev@manifoldcf.apache.org>
Content-Type: multipart/alternative; boundary=001a113f8b4a304292051fe1d099

--001a113f8b4a304292051fe1d099
Content-Type: text/plain; charset=UTF-8

Hi Naveen,

There are three independent levels of acls in Active Directory: share,
folder, and document.  All three have to be considered in order to
determine if a document is visible to a user.  So you want (in share_acl
and NOT in share_deny_acl) AND (in folder_acl and NOT in folder_deny_acl)
AND (in doc_acl and NOT in doc_deny_acl) .

Karl


On Wed, Sep 16, 2015 at 2:14 PM, Naveen.A.N <anaveen@searchblox.com> wrote:

> I am not sure what is the proper way to filter the documents using ACL
> tokens in Active Directory.
> The document contains document allow tokens and document deny tokens. also,
> I have the user tokens. Do we need to filter like "user tokens which are in
> document allow and not in document deny"  is that correct way of doing
> filtering document for a user?
> --
> Thanks and Regards,
> Naveen A.N
> Lead Software Developer
> SearchBlox Software, Inc.
> www.searchblox.com
> Ph: +91 9445389179
>

--001a113f8b4a304292051fe1d099--