dm_world magic

Interesting observation: the more I learn Documentum the more I realize that it is a piece of dog crap. Recently I demonstrated possibility to create world-writable ACL by setting the value of owner_name to ‘dm_world’, this fact have given me idea that the same trick will work for sysobjects (i.e. create world-readable sysobject regardless assigned ACL), moreover SQLs generated by Content Server look very promising:

API> ?,c,select count(*) from dm_folder
count(*)              
----------------------
                 14865
(1 row affected)

API> ?,c,EXEC GET_LAST_SQL
result
--------------------------

select all count(*) ... ( dm_folder.owner_name in ('test','dm_world')) ...

but:

API> create,c,dm_document
...
09024be9800a912c
API> set,c,l,owner_name
SET> dm_world
...
OK
API> save,c,l
...
[DM_SYSOBJECT_E_CANT_FIND_USER]error:  "The user 'dm_world' specified does not exist."

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s