TREX Security ?

[Former Member]

Hi,

We are trying to configure search capability using TREX and interested in knowing how the authentication happens.

In other words if user do not have an access to the document then user should not get that document displayed in the search result, in this scenario the document is on a windows file system and portal is installed on UNIX machine.

Is TREX is capable of achieving this kind of capability? Has someone achieved this? Any document available on this topic?

Thanks,

Bhavesh

[bettina_knauss · Accepted solution]

Hello Bhavesh,

In KMC ACLs are used to control the user activities on folders and documents. These ACLs are also used to present the search result to the end user who is searching. TREX returns a complete result set without knowing about permissions. In KMC the result set is then filtered according to the ACLs of the content. Users without permission are not allowed to see the document concerned.

regards,

Bettina

[KarstenH]

Hi Bhavesh,

you were asking for access control on individual documents and folders, right?

Then please refer to Bettina's post and according documentation such as (depending on your release):

http://help.sap.com/saphelp_nw2004s/helpdata/en/0a/122bd1fd34c24c90618381f89124c6/frameset.htm

or

http://help.sap.com/saphelp_nw04/helpdata/en/b2/4bc041f123c817e10000000a155106/frameset.htm

KM search results will only list items a user is allowed to open. Do watch out for specifics, though, when accessing Windows file servers from a UNIX-based portal.

http://help.sap.com/saphelp_nw04/helpdata/en/ed/b334ea02a2704388d1d2fc3e4298ad/frameset.htm

The other two replies to your post are talking about access rights to entire indexes. This can be an additional means to manage access rights, but has nothing to do with your document- and folder-level access rights on the file system and in KM.

Regards, Karsten

[Former Member]

hi,

Permissions determine who is allowed to use an index for searching and who is allowed to maintain an index.

Check this

http://help.sap.com/saphelp_nw2004s/helpdata/en/50/6adc6cfe48b248b1480553ffba81a3/content.htm

Regards,

Ganesh N

[Former Member]

Hi Bhavesh,

When creating an index, you have the Permissions link to set the permissions for the users to access the index.

You can set the groups/users who should access the index. By this only those users who are in the list will be able to search and retrieve the document which belongs to this particular index.

Hope this solves your issue.

Regards,

venkat.

[Pls reward points if useful]

[Former Member]

Hi Venkat,

This process seems to be very manual and long process since we have to create lots of groups and at times different user has different area of access.

Is there any better way of achieving the same ?

Thanks,

Bhavesh