Iterate permissions for all applications

0

Hi Bo,

you can use the below script as a starting point.


I ignored all privileges which are directly assigned on the workflow instance level and I didn't resolve group memberships.
It also ignores the privileges on application level, but than these are not relevant for accessing workflows.

Best regards,
Daniel

SELECT
[SEC_DEFID]
, DEF_Name
--,[SEC_ASSID]
--, ASS_Name
,ASS_WFID
,(select WF_Name from WorkFlows where WF_ID = ASS_WFID) as Workflow
, ASS_DTYPEID
,(select DTYPE_Name from WFDocTypes where ASS_DTYPEID = DTYPE_ID) as DocType
, COM_Name
, securityLevel.Name
,[SEC_LevelID]
,[SEC_COMID]
,[SEC_IsDomainGroup]
,[SEC_IsDeleted]
--,[SEC_Reason]
--,[SEC_IsPermanent]
,[SEC_IsGlobal]
,[SEC_USERGUID]
,[SEC_Department]
,[SEC_UserLoginName]
,[SEC_UserName]
,[SEC_ReasonAddMsg]
FROM [dbo].[WFSecurities] join DicSecurityLevels securityLevel on SEC_LevelID = securityLevel.[TypeID]
left join WFDefinitions on SEC_DEFID = DEF_ID
left join DocTypeAssocciations on SEC_ASSID = ASS_ID
left join Companies on SEC_COMID = COM_ID
where SEC_WFDID is null
order by SEC_DEFID, ASS_WFID, ASS_DTYPEID,SEC_COMID, SEC_LevelID

Very usefull script! Thanks for sharing it!