General

Why is does an incremental crawl last as long as a full crawl?

The Documentum Connector performs incremental crawls based on snapshot files, which are meant to match the exact documents that have been indexed by the connector to the search engine. On an incremental crawl, the connector fully crawls the documentum repository the same as a full crawl, but it only indexes the modified, new or deleted documents during that crawl.

How does Group Expansion Work?

  1. Download all ACLs
  2. Fetch $groups the $user is member of.
  3. For each ACL
    1. Check if $user is the file owner and dm_owner has at least BROWSE permit.

      If so, return with user has read access.

    2. Check if $user belongs in all groups specified in "required groups".

      If not, return with user has no read access.

    3. Check if at least one group from $groups is on "required groups set":

      If not, return with user has no read access.

    4. For each deny:

      If one deny entry matches $user or one group in $groups, return with user has no read access.

    5. For each allow:

      If at least one entry matches $user or one group in $groups, return with user has read access.

    6. If up until now the user has read access, and dm_world has at least BROWSE permit, return user has read access.

Note:

  • If user has read access, then we add the ACL ID as a group name.
  • If user is owner and dm_owner has BROWSE permit or higher, the user is added as group name.

Specific Documentum document level security examples can be found here

  • No labels