Query Access Group Info from CFG DB?

[Scottyjohn]

Hi all,
Has anyone came up with a method of querying the security access info from CFG DB?  We are running 7.6.....

Any help appreciated

[Timur Karimov]

[quote author=Scottyjohn link=topic=6193.msg26972#msg26972 date=1298373734]
Has anyone came up with a method of querying the security access info from CFG DB?  We are running 7.6.....
[/quote]

hmm, what u exactly mean ? how u can got the list of security group by pure SQL query at config DB ?
something like this ?:
SELECT [group_dbid]
      ,[member_dbid]
      ,[member_type]
      ,[group_csid]
      ,[member_csid]
  FROM [GCTI8].[dbo].[cfg_access_group]

WBR

[Scottyjohn]

Hi,
No, I can see how to get the info about the actual access groups, but I need to see if its possible to query the security permissions that have been assigned to Genesys objects, and then in a second query, which persons are assigned to which access group, thereby building an overall picture of the security of the solution.

Hope this is a bit clearer

[René]

Hi,

Security permissions are stored in cfg_ace table where each row represents permission for particular user (user_dbid) and object (object_dbid). Permissions are stored as integer value in the access_mask column.

R.

[Scottyjohn]

Hi Rene,
That does look like the kind of thing Im after, but in my environment with hundreds of folders, objects and 88 access groups, it only shows 33 entries in that table.  Any ideas as to why that would be the case?

[René]

Hi,

That's really strange you have just few records in this table. I have about 1.300 records just on my test virtual machine... Isn't your configuration database corrupted?

R.

[Scottyjohn]

I did a bit of digging in the Genesys knowledge base and I think the entries in the table you mention are where there have been specific permissions set on an object, rather than where the permissions are inherited.  Apparently the inherited permissions are built in memory and are therefore not queryable?

I cant think how that can be the case?