Settings for mapping CMIS basic permissions by using IBM CMIS for FileNet Content Manager ACL Services

The CmisToP8PermissionMapping parameters enable you to map CMIS basic permissions, such as cmis:read, cmis:write, and cmis:all to access rights on IBM FileNet P8.

CMIS basic permissions

The CMIS basic permissions are defined in the OASIS Content Management Interoperability Services specification 2.1.12.2, which is available online at http://docs.oasis-open.org/cmis/CMIS/v1.1/cs01/CMIS-v1.1-cs01.html#x1-7700012.

CmisToP8PermissionMapping parameters

The CmisToP8PermissionMapping parameters are broken down into separate categories for documents, folders, and other objects because a CMIS basic permission can be applied to each type of IBM FileNet P8 object differently.
  • Document parameters
    • CmisToP8PermissionMapping.Document.Read
    • CmisToP8PermissionMapping.Document.Write
    • CmisToP8PermissionMapping.Document.All
  • Folder parameters
    • CmisToP8PermissionMapping.Folder.Read
    • CmisToP8PermissionMapping.Folder.Write
    • CmisToP8PermissionMapping.Folder.All
  • Other object type parameters
    • CmisToP8PermissionMapping.Others.Read
    • CmisToP8PermissionMapping.Others.Write
    • CmisToP8PermissionMapping.Others.All
The format of values are bit operator OR ' | ' separated strings. Each value is a String representation of either AccessRight or AccessLevel constants, which are defined in the Content Engine JAVA API Reference documentation:
For example:
CmisToP8PermissionMapp.Document.Read = AccessLevel.READ | AccessRight.VIEW_CONTENT

CmisToP8PermissionMapp.Folder.Write  = AccessRight.READ | AccessRight.READ_ACL |
AccessRight.VIEW_CONTENT | AccessRight.CHANGE_STATE | AccessRight.CREATE_INSTANCE |
AccessRight.LINK | AccessRight.UNLINK | AccessRight.WRITE | AccessRight.CREATE_CHILD
 | AccessRight.MINOR_VERSION | AccessRight.PUBLISH

CmisToP8PermissionMapp.Others.All = AccessLevel.FULL_CONTROL_CUSTOM

You can configure some or all of the CmisToP8PermissionMapping parameters. If you do not specify a value for a parameter, the default value is used.

The following information is validated:
  • The format of the parameter value
  • The prefix of the AccessRight strings and the AccessLevel strings
  • The access level or access right that was specified
If any errors occur during validation, the default value for the parameter is used. The following list describes the default values for each parameter:
CmisToP8PermissionMapping.Document.Read
CmisToP8PermissionMapping.Document.Read = AccessRight.READ | 
AccessRight.READ_ACL | AccessRight.VIEW_CONTENT
CmisToP8PermissionMapping.Document.Write
CmisToP8PermissionMapping.Document.Write = AccessRight.READ
 | AccessRight.READ_ACL | AccessRight.VIEW_CONTENT | AccessRight.CHANGE_STATE
 | AccessRight.CREATE_INSTANCE | AccessRight.LINK | AccessRight.UNLINK
 | AccessRight.WRITE
CmisToP8PermissionMapping.Document.All
CmisToP8PermissionMapping.Document.All = AccessRight.READ
 | AccessRight.READ_ACL | AccessRight.VIEW_CONTENT | AccessRight.CHANGE_STATE
 | AccessRight.CREATE_INSTANCE | AccessRight.LINK | AccessRight.WRITE 
 | AccessRight.MAJOR_VERSION | AccessRight.MINOR_VERSION | AccessRight.PUBLISH
 | AccessRight.RESERVED12 | AccessRight.RESERVED13 | AccessRight.DELETE
 | AccessRight.UNLINK | AccessRight.WRITE_ACL | AccessRight.WRITE_OWNER
CmisToP8PermissionMapping.Folder.Read
CmisToP8PermissionMapping.Folder.Read = AccessRight.READ | AccessRight.READ_ACL
CmisToP8PermissionMapping.Folder.Write
CmisToP8PermissionMapping.Folder.Write = AccessRight.READ
 | AccessRight.READ_ACL | AccessRight.VIEW_CONTENT | AccessRight.CHANGE_STATE
 | AccessRight.CREATE_INSTANCE | AccessRight.LINK | AccessRight.UNLINK
 | AccessRight.WRITE | AccessRight.CREATE_CHILD | AccessRight.MINOR_VERSION
 | AccessRight.PUBLISH
CmisToP8PermissionMapping.Folder.All
CmisToP8PermissionMapping.Folder.All = AccessRight.READ
 | AccessRight.READ_ACL | AccessRight.VIEW_CONTENT | AccessRight.CHANGE_STATE
 | AccessRight.CREATE_INSTANCE | AccessRight.LINK | AccessRight.UNLINK
 | AccessRight.WRITE | AccessRight.CREATE_CHILD | AccessRight.MINOR_VERSION
 | AccessRight.PUBLISH | AccessRight.RESERVED12 | AccessRight.RESERVED13
 | AccessRight.DELETE | AccessRight.WRITE_ACL | AccessRight.WRITE_OWNER
 | AccessRight.MAJOR_VERSION
CmisToP8PermissionMapping.Others.Read
CmisToP8PermissionMapping.Others.Read = AccessRight.READ | AccessRight.READ_ACL
CmisToP8PermissionMapping.Others.Write
CmisToP8PermissionMapping.Others.Write = AccessRight.READ | AccessRight.READ_ACL
 | AccessRight.CREATE_INSTANCE | AccessRight.LINK | AccessRight.WRITE
CmisToP8PermissionMapping.Others.All
CmisToP8PermissionMapping.Others.All   = AccessRight.READ
 | AccessRight.READ_ACL | AccessRight.CREATE_INSTANCE
 | AccessRight.CREATE | AccessRight.LINK | AccessRight.WRITE
 | AccessRight.DELETE | AccessRight.RESERVED12 | AccessRight.RESERVED13
 | AccessRight.WRITE_ACL | AccessRight.WRITE_OWNER