Page 1 of 1

Authority of files created by Integrator's PDFDOCUMENTService

Posted: Tue Sep 20, 2022 9:17 pm
by Joerg Hamacher
Hi again,

we use LANSA Integrator in a lot of programs to create PDF documents and get problems with file authority and owner of the PDF.
User SMH starts our program in interactive mode, the program creates a PDF that will be mailed to customers and than shall be copied, renamed or deleted.
These last steps do not work because of missing authorities.
SMH is a normal user without *ALLOBJ rights and due to security reasons this cannot be changed.
The user has all rights for the folder but no the sufficient rights for the PDF that he himself creates.

The IFS folder into which we put the PDF has these authorities:

Daten- ----------Objektberechtigungen----------
Ausw Benutzer berecht. Existenz Verwaltung Änderung Referenz

*PUBLIC *RWX
SMH *RWX X X X X
LSAPGMLIB *RWX X X X X

When we create a PDF into this folder with Integrator the PDF file gets these authorities (owner = LSAPGMLIB):

Daten- ----------Objektberechtigungen----------
Ausw Benutzer berecht. Existenz Verwaltung Änderung Referenz

*PUBLIC *RW
LSAPGMLIB *RW X X X X


Why does the new PDF file not adapt the authorities of the folder it is put in? Can this be changed in any way?
Is it possible to tell the Integrator Job that creates the PDF that it shall run under user profile SMH to use SMH as owner instead of LSAPGMLIB?

Many thanks in advance,
Joerg

Re: Authority of files created by Integrator's PDFDOCUMENTService

Posted: Wed Sep 21, 2022 5:00 am
by PatrickF
Security for files created by L/I is documented here : https://docs.lansa.com/15/en/lansa093/i ... 3_0080.htm which the L/I Default Settings properties files allows you to set at folder level and the files created. Restart the JSM subsystem after making the change, and correct any folder security so it has correct *PUBLIC settings for future new documents.

The owner of the files will depend on the application that created the file. If a web appication, it will be the LWEB_JOB user profile used to create the PDF.