Open topic with navigation

# Query IDOL Server with Security Information

When you use document security, your front-end application must use the `SecurityInfo` parameter to include the encrypted user security details in queries. For example:

`/action=Query&Text=accounts&SecurityInfo=[encrypted string]`

The `SecurityInfo` parameter specifies security details for the user who sends the query. When IDOL processes the query, it compares the SecurityInfo details with the ACL field in result documents to determine which documents the user has permission to view.

In the previous example, a user sends a query to find documents containing the text accounts. The query returns only those documents that the user is permitted to view.

TIP:

For information about which actions accept the `SecurityInfo` parameter, refer to the IDOL Server Reference.

You cannot use `SecurityInfo` for administrative actions, which have authorization restrictions by IP addresses, SSL identity, or GSS principal in the `[AuthorizationRoles]` section of your IDOL component configuration files.

You can obtain the encrypted `SecurityInfo` string in the following ways:

- your front-end application can send a `UserRead` action to the IDOL Community component.
- You can use the Autonomy ACI API to encrypt the user details.

© 2017 Hewlett Packard Enterprise Development LP | Send documentation feedback to HPE Close Send documentation feedback To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to AutonomyTPFeedback@hpe.com. We appreciate your feedback! Product: Topic Title: Help Topic: Feedback:

_HP_HTML5_bannerTitle.htm