Upgrading With ACL

Migration to 12.0 SP2

When upgrading to 12.0 SP2, the ACL model gets upgraded to a new security model. The migration script will run as a part of installation but it also can be run independently of the installation procedure.
Note: If you export CLI, it does not alter the permissions. These permission will need to be migrated. For example the resources from 12.0 SP1 and before come with VIEW permission but when you upgrade to 12.0 SP2, the migration script changes VIEW to EXECUTE.
The migration script will run the first time Spectrum server is started after upgrading to 12.0 SP2. It will only run once. The migration script will perform the following:
  • All the permissions on folders will be removed.
  • All the permissions on resources will be removed.
  • The new EXECUTE permission will be applied if the VIEW permission existed on any resources.
  • Any existing Deny permissions will be removed.
  • Dataset VIEW permission is removed. Other permissions on Dataset such as CREATE, MODIFY, and DELETE will be preserved if they existed prior to upgrade.
  • NamedResourceMetadata resources will have no ACL for now.
Note: Having added the new EXECUTE permission, the Spectrum will start over as a new slate.