For the full reference of the Rights Management Ext DSC, please click here.

Background

Note: This article is relevant only if Rights Management ES component is installed as part of the LiveCycle ES installation. Out of the box, LC Rights Management ES allows you to manage policy set and policy through Rights Management Administrative page via "adminui" or "edc" web interface contexts given by LiveCycle. Users with sufficient roles would be able to login to either of the two web interfaces to manage the policies on the server.
 
Here is the business scenario where a PDF document could be released to a dynamic set of users where each policy is associated with each and every user or user group, allowing business to control the document for the user/user group separately to the same document distributed to other users.
This is very straight forward to be achieved when the admin user logs in to the web interface like "adminui" or "edc". However, when the volume gets larger, it requires some way of automating the permissions update to policy or even creating or deleting policy on the fly, for instance by submitting a form, or triggered by events monitoring on suspicious activity around the policy.
 Now via workbench, having installed Rights Management ES, a DSC is installed that allows some automation in managing the policies within a process/workflow. The DSC Rights Management Service has these following operations:

1. Apply policy
2. Create policy from template
3. Get license identifier
4. Remove policy security
5. Revoke license
6. Switch policy
7. Unlock policy protected PDF
8. Unrevoke license
9. Update policy.One limitation on the DSC is that it does not provide flexibility in controlling the permissions associated with each user / user group to a policy. When adding a user / user group is added to a policy, it gives only the default permission, that is "View Document Offline" and no other permission.

 
There are no other way to manage those permissions on policy.

As a result, we have developed an extension to the DSC with added operations to allow us to manage the policy permission to the user / user groups associated with the policy - Rights Management Ext DSC.

Dynamically Add, Update and Remove Principal to a Policy with Permission Settings in a Workflow

The additional Rights Management Ext DSC provides additional operations to allow control to principal permissions on a policy in a workflow.

A common scenario would be a process is started by submitting a form containing the policy information and the selected principal with permissions. In the process workflow, here are steps to:

1. Add or update a principal to a policy

The lookup operation retrieves the principal ID for the user/group (in this case user). Then calling add or update principal to policy operation to add the principal to a policy.

Here are the settings:

!lookup_prop2.gif!   Looking-up user and storing the result a process variable of User type.

Setting the policy details and the principal ID to add / update to the policy. The principal ID is retrieved from the User type process variable retrieved earlier.
 
Specifying the validity period of the permission for the principal

Specifying the permission settings of the principal access to the policy
 
The screenshots above show the settings you can have control on in a process worfklow to set different combination of permissions for a principal to be associated with a policy.

2. Remove a principal from a policy

Similarly, the lookup operation retrieves the principal ID for the user/group (in this case user) for the removal. Then calling remove principal from policy operation to remove the principal from a policy.
Here is the settings for remove principal from policy:

Specifying the policy details and principal ID to be removed from the policy
 

If you want to have a go yourself with Rights Management Ext DSC, the DSC will be uploaded to http://www.avoka.com/avoka/escomponents.shtml and available for download shortly.

We would appreciate any feedback or suggestions if you find there are other operations you would like to have for your workflow with regards to Rights Management ES.