Grant-StorePermission

Top  Previous  Next

Summary

Grant-StorePermission [-StoreUri] <Uri> [-Permissions] <String> [-Principals] <String[]>

Description

Assigns permissions to access a Web3 topic map store and/or schema store to one or more principals.

A principal may be a user or group and are identified by using the identity string assigned to them by the underlying authentication mechanism. In a typical deployment, using Windows or ActiveDirectory for authentication, the principal identity should be the user name/group name in the DOMAIN\NAME format. In addition all Web3 stores are initialized with an "anonymous user" identity with the name "Anonymous".

This command has a ConfirmImpact of High and so will usually require interactive confirmation of the updates before applying them to the topic map store.

 

Parameters

StoreUri <Uri>
The web address of the store that the permissions are assigned on.
To assign the same set of permissions to both the topic map store and the schema store, this parameter should be the full URI of the Web3 service installation (e.g. http://localhost/web3/).
To assign the permissions only to the topic map store, this parameter should be the full URI of the Web3 topic maps collection (e.g. http://localhost/web3/topicmaps/)
To assign the permissions only to the schema store, this parameter should be the full URI of the Web3 schemas collection (e.g. http://localhost/web3/schemas/).
This is a positional parameter - it must appear as the first parameter and the parameter name can be omitted.
Permissions <String>.
Specifies the permissions to be granted. This is a positional parameter - it must appear as the second parameter and the parameter name can be omitted.
The string may contain any of the following characters in either upper- or lower-case:
oA - grants administrator permission to the store. This permission allows the user to alter permissions for other users on the store.
oC - grants permission to create new topic maps in the topic map store or new schemas in the schema store.
oJ - grants permission to create new long-running processing jobs in the store.
oN - revokes all permissions on the store. If combined with other characters it always overrides them - i.e. the permission strings "ACJN", "AN", "CN" etc. is equivalent to "N"
Principals
A list of the identities of the users / groups whose permissions are to be updated. If a user/group already has some permissions granted on the store, then the permissions specified in this command will overwrite any existing permissions. This is a positional parameter - it must appear as the third parameter and the parameter name can be omitted.

 

Returns

This command has no return values.

 

Examples

The following command revokes all permissions granted on the topic map and schema store to the Anonymous user

PS C:\Users\Administrator> Grant-StorePermission http://localhost/web3/ N Anonymous
 
Confirm
Are you sure you want to perform this action?
Performing operation "Grant-StorePermission" on Target "Anonymous".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"): Y