trying to set permissions ex: "Component Management" on a Publication in Tridon using Core Service

Question

I am trying to add a new Group to an existing Publication and assign Component Management permission as shown in the snippet below.

While using the below mentioned code I do not receive any error but the security Group is not added to the access control list of the Publication.

PublicationData oPublicationData = (PublicationData)client.Read(
                                                      publicationId, new ReadOptions());
PublicationData pubData = SetRightsOnPublication(oPublicationData, trustee, 
                                                      Rights.ComponentManagement);
client.Update(pubData, new ReadOptions());

public static PublicationData SetRightsOnPublication(PublicationData oPublicationData, 
              TrusteeData trusteeId, Rights allowedRights, Rights deniedRights = Rights.None)
{
    var entries = oPublicationData.AccessControlList.AccessControlEntries.ToList();
    // First check if this trustee already has some permissions
    var entry = entries.SingleOrDefault(ace => ace.Trustee.IdRef == trusteeId.Id);
    if (entry != null)
    {
        // Remove this entry
        entries.Remove(entry);
    }

    entries.Add(new AccessControlEntryData
    {
        AllowedRights = allowedRights,
        DeniedRights = deniedRights,
        Trustee = new LinkToTrusteeData { IdRef = trusteeId.Id, Title = trusteeId.Title, 
                                          Description = trusteeId.Description }});
    oPublicationData.AccessControlList.AccessControlEntries = entries.ToArray();
    return oPublicationData;
}

Answer 1

I have been struggling with a similar issue when setting permissions. The example from the link provided by Dominic led me in the right direction. I finally figured out when populating the new ArrayOfAccessControlEntryData object, new AccessControlEntryData objects have to be created. This is very strange, but if populated with the existing objects from the list, the changes were not saved into SDL. I assume the same issue could be true for setting rights on a publication.

See below for a working solution in a Java client:

    private void setOrganizationalItemPermissionsForTrustee(OrganizationalItemData organizationalItem, String trusteeId, String[] permissions) {
        // Create new access control entries array
        ArrayOfAccessControlEntryData accessControlEntries = new ArrayOfAccessControlEntryData();

        // Populate new access control entries array with access control entries we do not change
        organizationalItem.getAccessControlList().getAccessControlEntries().getAccessControlEntryData()
            .stream()
            .filter(p -> !p.getTrustee().getIdRef().equals(trusteeId))
            .forEach(p -> {
                // We have to create new AccessControlEntryData objects, otherwise changes are not saved :/
                AccessControlEntryData accessControlEntry = new AccessControlEntryData();
                accessControlEntry.setTrustee(p.getTrustee());
                accessControlEntry.getAllowedPermissions().addAll(p.getAllowedPermissions());
                accessControlEntries.getAccessControlEntryData().add(accessControlEntry);
            });

        // Create access control entry with new/updated permissions for provided trustee
        LinkToTrusteeData trustee = new LinkToTrusteeData();
        trustee.setIdRef(trusteeId);

        AccessControlEntryData updatedAccessControlEntry = new AccessControlEntryData();
        updatedAccessControlEntry.setTrustee(trustee);
        updatedAccessControlEntry.getAllowedPermissions().addAll(Arrays.asList(permissions));

        accessControlEntries.getAccessControlEntryData().add(updatedAccessControlEntry);

        // Set newly created access control entries array on organizational item
        organizationalItem.getAccessControlList().setAccessControlEntries(accessControlEntries);

        this.coreService.save(organizationalItem);
}