4.9 Restricted Effective Rights Query

The query below illustrates how to perform several restrictions when querying the Effective Rights table.

First, the like operator is used to restrict the trustees to those in the FewUsers Organization. The Object is restricted to dward0.FewUsers by a simple equality comparison. Finally, the attributes are limited to [Entry Rights]. This query lists the rights of the trustee to operate on the dward0.FewUsers entry as a whole. The query is further restricted to retrieve the value of only the Browse and Delete privileges. The result table illustrates the typical situation where all trustees have browse privileges but none have delete privileges.

SQL Statement

  SELECT "Object Name", "Trustee Name", "Attribute", "Browse", "Delete" 
 

 FROM "Effective Rights" 
 

 WHERE "Trustee Name" LIKE ’*.FewUsers’ AND "Object Name" = ’dward0.FewUsers’ 
 

 AND "Attribute" = ’[Entry Rights]’
 

Result Table

The query produces a table similar to the following. The zeros in the rights columns mean FALSE (the trustee does not have this right), and the ones TRUE (the trustee does have this right).