get-pwfolderSecurity returns extreme number of entries

RE: get-pwfolderSecurity returns extreme number of entries

Robert Biggar — Mon, 18 Jul 2022 13:54:21 GMT

Brian:

I am trying to get a script to Break Inheritance. The direction I was headed is to change one of the users' access mask...but I can't "see" what is on the folder...because only explicit ACL is being returned. Have you ever looked into this? Is there a better way...or a way to get the "inherited ACLs"?

Thanks

Bob

RE: get-pwfolderSecurity returns extreme number of entries

Brian Flaherty — Fri, 18 Feb 2022 18:07:15 GMT

The Type, Name, and Access_Control_Settings will only be returned for folders which have explicit access control set and is not inheriting. Hope this helps.

RE: get-pwfolderSecurity returns extreme number of entries

Brandon Williams — Thu, 17 Feb 2022 21:27:46 GMT

try using this parameter -FolderLevel 1

RE: get-pwfolderSecurity returns extreme number of entries

Robert Biggar — Thu, 17 Feb 2022 13:52:28 GMT

Question:

The Verbose information returns Type and Member name...but the table information returned doesn't have that.

There is no "-slow"...any Idea hot to get all the table info populated?

Thanks

---------------------------------------------------------------------------------------------------------------------------------------

VERBOSE: 'SecTest' is inheriting access control
VERBOSE: - InheritingFrom: 'Lansing Support\biggarr'
VERBOSE: - Type: 'Document'
VERBOSE: - MemberName: 'engineering support services'
VERBOSE: - AccessMask: '--CDrwSRW--'
VERBOSE: 'SecTest' is inheriting access control
VERBOSE: - InheritingFrom: 'Lansing Support\biggarr'
VERBOSE: - Type: 'Document'
VERBOSE: - MemberName: 'All_Users (*Everyone)'
VERBOSE: - AccessMask: 'NA'

ProjectName : SecTest
SecurityType : Project
Type :
Name :
Access_Control_Settings :
Workflow :
State :
InheritingFrom : Lansing Support\biggarr
FullPath : SecTest
ParentProjectName : SecTest

ProjectName : SecTest
SecurityType : Document
Type :
Name :
Access_Control_Settings :
Workflow :
State :
InheritingFrom : Lansing Support\biggarr
FullPath : SecTest
ParentProjectName : SecTest

RE: get-pwfolderSecurity returns extreme number of entries

Robert Biggar — Thu, 17 Feb 2022 12:49:25 GMT

Good Idea.

I tried this:

Export-PWProjectAccessControl -Folderid $lp | Format-Table...

It is slow, but it gives me much better output:

ProjectName SecurityType Type Name Access_Control_Settings Workflow State InheritingFrom FullPath ParentProjectName
----------- ------------ ---- ---- ----------------------- -------- ----- -------------- -------- -----------------
SecTest Project Lansing Support\biggarr SecTest SecTest
SecTest Document Lansing Support\biggarr SecTest SecTest
test123 Project Lansing Support\biggarr SecTest\test123 SecTest
test123 Document Lansing Support\biggarr SecTest\test123 SecTest

missing some columns... but certainly more of what I expected....

Thanks Brandon, this is a big help!

Bob

RE: get-pwfolderSecurity returns extreme number of entries

Brandon Williams — Wed, 16 Feb 2022 22:36:18 GMT

You know what, now that I think about it, I tried this cmdlet in the past and it was not doing what I wanted. I ended up using something like this.

Export-PWProjectAccessControl -FolderPath $Path | Format-Table

This spit out what I wanted and I was able to manipulate it better.

RE: get-pwfolderSecurity returns extreme number of entries

Robert Biggar — Wed, 16 Feb 2022 20:01:04 GMT

Good thought...this is what I used:

$SecTable = get-pwfolders -FolderID $Lp -JustOne -Slow | Get-PWFolderSecurity

Have you used this CMDlet on your system?

How long does it usually take for you?

and how many records does it return?

We have an enormous ACL list... and we have had speed issues - which we attributed to a bloated table...but when this returned 3100 records...It seemed odd to me...but I don't have anything to compare it to

Thanks Brandon!

Bob

RE: get-pwfolderSecurity returns extreme number of entries

Brandon Williams — Wed, 16 Feb 2022 17:54:08 GMT

Question, did you use Get-PWFolders -FolderPath $path -JustOne ? Its possible it returned subfolder security if you didnt use the -JustOne parameter