Genesys CTI User Forum

Genesys CTI User Forum => Genesys CTI Technical Discussion => Topic started by: Scottyjohn on February 22, 2011, 11:22:14 AM

Title: Query Access Group Info from CFG DB?
Post by: Scottyjohn on February 22, 2011, 11:22:14 AM

Hi all,
Has anyone came up with a method of querying the security access info from CFG DB?  We are running 7.6.....

Any help appreciated

Title: Re: Query Access Group Info from CFG DB?
Post by: Timur Karimov on February 22, 2011, 12:02:37 PM

[quote author=Scottyjohn link=topic=6193.msg26972#msg26972 date=1298373734]
Has anyone came up with a method of querying the security access info from CFG DB?  We are running 7.6.....
[/quote]

hmm, what u exactly mean ? how u can got the list of security group by pure SQL query at config DB ?
something like this ?:
SELECT [group_dbid]
      ,[member_dbid]
      ,[member_type]
      ,[group_csid]
      ,[member_csid]
  FROM [GCTI8].[dbo].[cfg_access_group]

WBR

Title: Re: Query Access Group Info from CFG DB?
Post by: Scottyjohn on February 22, 2011, 04:05:56 PM

Hi,
No, I can see how to get the info about the actual access groups, but I need to see if its possible to query the security permissions that have been assigned to Genesys objects, and then in a second query, which persons are assigned to which access group, thereby building an overall picture of the security of the solution.

Hope this is a bit clearer

Title: Re: Query Access Group Info from CFG DB?
Post by: René on February 22, 2011, 05:44:27 PM

Hi,

Security permissions are stored in cfg_ace table where each row represents permission for particular user (user_dbid) and object (object_dbid). Permissions are stored as integer value in the access_mask column.

R.

Title: Re: Query Access Group Info from CFG DB?
Post by: Scottyjohn on February 23, 2011, 10:41:10 AM

Hi Rene,
That does look like the kind of thing Im after, but in my environment with hundreds of folders, objects and 88 access groups, it only shows 33 entries in that table.  Any ideas as to why that would be the case?

Title: Re: Query Access Group Info from CFG DB?
Post by: René on February 24, 2011, 11:05:48 AM

Hi,

That's really strange you have just few records in this table. I have about 1.300 records just on my test virtual machine... Isn't your configuration database corrupted?

R.

Title: Re: Query Access Group Info from CFG DB?
Post by: Scottyjohn on February 25, 2011, 11:03:14 AM

I did a bit of digging in the Genesys knowledge base and I think the entries in the table you mention are where there have been specific permissions set on an object, rather than where the permissions are inherited.  Apparently the inherited permissions are built in memory and are therefore not queryable?

I cant think how that can be the case?