ACL configuration

Started by kai, June 17, 2021, 12:04:02 AM

Previous topic - Next topic


I not sure how to configure the access control list for a user group.
What I want is: Show only files which have the label purple.
According to the documentation I thought I would have to
1. exclude everything
2. include category "@Label[Purple]"

But the result of this are 0 images in the WebViewer.

Then I tried the following:
1. exclude everything
2. include category XMP|Label|Purple

This works exactly as I expected and the viewer show only the images with a purple label.

As an additional task I wanted to exclude images with Rating 2. So with the previous result in mind I thought it could be done with:
1. exclude everything
2. include category XMP|Label|Purple
3. exclude category XMP|Rating|2

But this excludes everything again leaving me with 0 images in the WebViewer.

Can anyone give me a hint as to what I am doing wrong?


Maybe you are affected by a problem fixed in the code base of IMatch 2021 (and the corresponding compatibility update for IMA which will be released at the same time as IMatch 2021).

See the end of this thread:

Unfortunately it is not viable to roll-back these code changes and 3rd party components back into the IMatch 2020 / IMA 2019 code base.
If you are affected by this rare bug, you should setup ONE category which contains only the files you want to make available, and then set the ACL to this category.
Combine @Label and @Rating in a formula, check the result is what you expect, set the ACL to that category. This will also be faster during runtime.


I see, yes maybe it's the same cause.
Thank you Mario! Then I'll try it with a dedicated category.  :)


One dedicated category is always preferable.

A) You can make it explicit that this category is used for ACL by using a prefix like ACL_RatingLabel_GroupName or similar. Very handy if you have different ACLs for different user groups.

B) Since IMatch caches categories in memory (and the results of formula evaluations), this is also faster during runtime. And less resource-intensive if you run IMWS on a low-end PC.