[RESOLVED] ADOX.GetPermissions Mystery - Help!

[rjbudz]

I must be missing something, because this issue is not addressed anywhere and it seems to be a significant omission:

I'm attempting to get the permissions of all my users for all the objects within a database (with a networked system.mdw), using VBA so I can export it to Excel to play with.

I can get all user names, all groups, all forms, tables, etc. so it's just a matter of looping through everything to get what I want. As a trial run I hard coded the user group, object name and object type in GetPermissions within a Function.

The problem arises with the function's return value.
The answer I get is: 147456

What does this mean? Please don't tell me "What is life, the universe and everything?" though I wouldn't be overly surprised.

Microsoft has the GetPermissions fuction being fed into a function called ‘DecodePerms()’ which is all well and good if they had that code as well, which they don't.

Here is the pertinent code from Microsoft:

Set catDB = New ADOX.Catalog
 
With catDB
   ' Open Catalog object by using connection to current database.
   .ActiveConnection = CurrentProject.Connection
   
( ...) 
 
   ' Retrieve current permissions and display them in the Immediate window.
   lngRightsNow = .Groups(strGroup).GetPermissions(varObjName, lngObjectType, _
      varObjectID)
   Debug.Print [COLOR=Red]DecodePerms[/COLOR](lngRightsNow)
End With

It seems kind of dumb to spend the time to create an explanation if it leaves out the most important part, don’t ya think?

Someone must have used the GetPermissions method at some point in history and survived to write about it.

Any help out there?

[rjbudz]

Well, I guess not!

I got the answer from another discussion board. For the sake of anyone else who may need to know this, here it is (from http://www.microsoft.com/office/comm...xp=&sloc=en-us):

Well ... if you look in the help topic for the GetPermissions method in
the ADOX help file, you'll see that the method "Returns a Long value
that specifies a bitmask containing the permissions that the group or
user has on the object. This value can be one or more of the RightsEnum
constants." And if you click through to the topic on RightsEnum, you'll
see a table that I'll try to reproduce readably below:

Constant / Value / Description
==============================
adRightCreate / 16384 (&H4000) / The user or group has permission to
create new objects of this type.

adRightDelete / 65536 (&H10000) / The user or group has permission to
delete data from an object. For objects such as Tables, the user has
permission to delete data values from records.

adRightDrop / 256 (&H100) / The user or group has permission to remove
objects from the catalog. For example, Tables can be deleted by a DROP
TABLE SQL command.

adRightExclusive / 512 (&H200) / The user or group has permission to
access the object exclusively.

adRightExecute / 536870912 (&H20000000) / The user or group has
permission to execute the object.

adRightFull / 268435456 (&H10000000) / The user or group has all
permissions on the object.

adRightInsert / 32768 (&H8000) / The user or group has permission to
insert the object. For objects such as Tables, the user has permission
to insert data into the table.

adRightMaximumAllowed / 33554432 (&H2000000) / The user or group has the
maximum number of permissions allowed by the provider. Specific
permissions are provider-dependent.

adRightNone / 0 / The user or group has no permissions for the object.

adRightRead / -2147483648 (&H80000000) / The user or group has
permission to read the object. For objects such as Tables, the user has
permission to read the data in the table.

adRightReadDesign / 1024 (&H400) / The user or group has permission to
read the design for the object.

adRightReadPermissions / 131072 (&H20000) / The user or group can view,
but not change, the specific permissions for an object in the catalog.

adRightReference / 8192 (&H2000) / The user or group has permission to
reference the object.

adRightUpdate / 1073741824 (&H40000000) / The user or group has
permission to update the object. For objects such as Tables, the user
has permission to update the data in the table.

adRightWithGrant / 4096 (&H1000) / The user or group has permission to
grant permissions on the object.

adRightWriteDesign / 2048 (&H800) / The user or group has permission to
modify the design for the object.

adRightWriteOwner / 524288 (&H80000) / The user or group has permission
to modify the owner of the object.

adRightWritePermissions / 262144 (&H40000) / The user or group can
modify the specific permissions for an object in the catalog.
==============================

The permissions are combined by "ORing" them, and you can check for each
permission value by ANDing it to the combined permissions and seeing if
the result is nonzero. So, what does 147456 mean? Let's see, in
hexadecimal that would be &H24000, which is equivalent to

&H20000 (adRightReadPermissions)
OR
&H4000 (adRightCreate)

So the group has permissions to create objects of this type, as well as
to read permissions for this object.

If you understand how that works, you should be able to create your own
DecodePerms() function.

--
Dirk Goldgar, MS Access MVP
www.datagnostics.com


To make it even easier:

Function DecodePerms(Permissions As Long) As String
' returns a comma delimited string of permissions
 
    DecodePerms = ""
    
    If (adRightRead And Permissions) Then DecodePerms = DecodePerms & "Read" & ","
    If (adRightNone And Permissions) Then DecodePerms = DecodePerms & "None" & ","
    If (adRightDrop And Permissions) Then DecodePerms = DecodePerms & "Drop" & ","
    If (adRightExclusive And Permissions) Then DecodePerms = DecodePerms & "Exclusive" & ","
    If (adRightReadDesign And Permissions) Then DecodePerms = DecodePerms & "Read Design" & ","
    If (adRightWriteDesign And Permissions) Then DecodePerms = DecodePerms & "Write Design" & ","
    If (adRightWithGrant And Permissions) Then DecodePerms = DecodePerms & "With Grant" & ","
    If (adRightReference And Permissions) Then DecodePerms = DecodePerms & "Reference" & ","
    If (adRightCreate And Permissions) Then DecodePerms = DecodePerms & "Create" & ","
    If (adRightInsert And Permissions) Then DecodePerms = DecodePerms & "Insert" & ","
    If (adRightDelete And Permissions) Then DecodePerms = DecodePerms & "Delete" & ","
    If (adRightReadPermissions And Permissions) Then DecodePerms = DecodePerms & "Read Permissions" & ","
    If (adRightWritePermissions And Permissions) Then DecodePerms = DecodePerms & "Write Permissions" & ","
    If (adRightWriteOwner And Permissions) Then DecodePerms = DecodePerms & "Write Owner" & ","
    If (adRightMaximumAllowed And Permissions) Then DecodePerms = DecodePerms & "Maximum Allowed" & ","
    If (adRightFull And Permissions) Then DecodePerms = DecodePerms & "Full" & ","
    If (adRightExecute And Permissions) Then DecodePerms = DecodePerms & "Execute" & ","
    If (adRightUpdate And Permissions) Then DecodePerms = DecodePerms & "Update" & ","
 
    
    ' to read in immediate window
    Debug.Print DecodePerms
    
End Function