add create project power

Is it possible to add the "Create projects" power for a user with DXL? I have a request to set this power for all users in a specific group.

Thank you for any suggestions.
SystemAdmin - Mon Mar 25 13:06:33 EDT 2013

Re: add create project power
Tony_Goodman - Tue Mar 26 05:04:26 EDT 2013

For a user to create projects they must be a database manager.
This means that they will also be able to do archive data, partition data, create groups, create users and manage the database. Not sure what the last power actually means, but it is enough to know that they will have more powers than just creating projects.

The class of user can be set as follows:
 

User u = find("user-name")
 
u.class = databaseManager
 
saveUserRecord(u)


Tony Goodman, www.smartdxl.com

Re: add create project power
llandale - Tue Mar 26 11:21:46 EDT 2013

Understand that "Groups" deal with "Access" and have nothing to do with user "Powers", such as power to create projects. Thus you cannot grant any such "power" by adding a user to any group.

Yes you can change the user "Type" of each user to "Database Manager". In your case though you probabaly want to change each user's type to "Custom", then select only "Create Projects" power.

Even with this "Power", they will still need "C"reate "Access" to whichever folder they intend to create the Project. Since its unlikey you will grant such access to the database folder, they will have to create the project under some other folder.

-Louie

I think this is a mistake. Let them ask for a project and you give it a good name and put it in the correct top level folder.

Maybe you can have some generic "CreateTestProject" user with "Create Projects" power, but "C" access ONLY to some silly "Playground" top-level folder. If they want to create a project they login temprarily as that user.

Re: add create project power
SystemAdmin - Wed Mar 27 09:54:48 EDT 2013

llandale - Tue Mar 26 11:21:46 EDT 2013
Understand that "Groups" deal with "Access" and have nothing to do with user "Powers", such as power to create projects. Thus you cannot grant any such "power" by adding a user to any group.

Yes you can change the user "Type" of each user to "Database Manager". In your case though you probabaly want to change each user's type to "Custom", then select only "Create Projects" power.

Even with this "Power", they will still need "C"reate "Access" to whichever folder they intend to create the Project. Since its unlikey you will grant such access to the database folder, they will have to create the project under some other folder.

-Louie

I think this is a mistake. Let them ask for a project and you give it a good name and put it in the correct top level folder.

Maybe you can have some generic "CreateTestProject" user with "Create Projects" power, but "C" access ONLY to some silly "Playground" top-level folder. If they want to create a project they login temprarily as that user.

Thank you for the reply. I do understand that you cannot give the "power" to a group. The issue is that we are using a tool to copy data that copies at the project level. So for a user to copy only a subset of the data they must have that data in a project. It is also true that they will only be able to create projects in the sub-folders. We have identified that all users in a specific group will need to be able to do this. As this groups is rather large, I would like to programmatically do the update.

You are correct, I do not wish to give the full access so I will try to give full access and then take back the access that they should not have. The better solution would be to just give the access they should have. I just do not see a way in DXL to do that.

Re: add create project power
llandale - Wed Mar 27 15:46:50 EDT 2013

SystemAdmin - Wed Mar 27 09:54:48 EDT 2013
Thank you for the reply. I do understand that you cannot give the "power" to a group. The issue is that we are using a tool to copy data that copies at the project level. So for a user to copy only a subset of the data they must have that data in a project. It is also true that they will only be able to create projects in the sub-folders. We have identified that all users in a specific group will need to be able to do this. As this groups is rather large, I would like to programmatically do the update.

You are correct, I do not wish to give the full access so I will try to give full access and then take back the access that they should not have. The better solution would be to just give the access they should have. I just do not see a way in DXL to do that.

You could write a DXL that loops through the membership of that group and upgrades the power of those users, but you have no mechanism for removing the power when they are removed from the group; and no notification when someone else is added to the group.

I wonder if you could just abandon all that. Let them create a Folder, and if they need that turned into a Project they can ask.

-Louie