[MS-WSSDLIM2]: Windows SharePoint Services: Content Database Document and List Item Management Communications Version 2 Protocol Specification

Transcription

1 [MS-WSSDLIM2]: Windows SharePoint Services: Content Database Document and List Item Management Communications Version Intellectual Property Rights Notice for Open Specifications Documentation Technical Documentation. Microsoft publishes Open Specifications documentation for protocols, file formats, languages, standards as well as overviews of the interaction among each of these technologies. Copyrights. This documentation is covered by Microsoft copyrights. Regardless of any other terms that are contained in the terms of use for the Microsoft website that hosts this documentation, you may make copies of it in order to develop implementations of the technologies described in the Open Specifications and may distribute portions of it in your implementations using these technologies or your documentation as necessary to properly document the implementation. You may also distribute in your implementation, with or without modification, any schema, IDL s, or code samples that are included in the documentation. This permission also applies to any documents that are referenced in the Open Specifications. No Trade Secrets. Microsoft does not claim any trade secret rights in this documentation. Patents. Microsoft has patents that may cover your implementations of the technologies described in the Open Specifications. Neither this notice nor Microsoft's delivery of the documentation grants any licenses under those or any other Microsoft patents. However, a given Open Specification may be covered by Microsoft Open Specification Promise or the Community Promise. If you would prefer a written license, or if the technologies described in the Open Specifications are not covered by the Open Specifications Promise or Community Promise, as applicable, patent licenses are available by contacting iplg@microsoft.com. Trademarks. The names of companies and products contained in this documentation may be covered by trademarks or similar intellectual property rights. This notice does not grant any licenses under those rights. Fictitious Names. The example companies, organizations, products, domain names, addresses, logos, people, places, and events depicted in this documentation are fictitious. No association with any real company, organization, product, domain name, address, logo, person, place, or event is intended or should be inferred. Reservation of Rights. All other rights are reserved, and this notice does not grant any rights other than specifically described above, whether by implication, estoppel, or otherwise. Tools. The Open Specifications do not require the use of Microsoft programming tools or programming environments in order for you to develop an implementation. If you have access to Microsoft programming tools and environments you are free to take advantage of them. Certain Open Specifications are intended for use in conjunction with publicly available standard 1 / 246

2 specifications and network programming art, and assumes that the reader either is familiar with the aforementioned material or has immediate access to it. Revision Summary Date Revision History Revision Class Comments 07/13/ Major Initial Availability 08/28/ Editorial Revised and edited the technical content 11/06/ Editorial Revised and edited the technical content 02/19/ Major Updated and revised the technical content 03/31/ Editorial Revised and edited the technical content 04/30/ Editorial Revised and edited the technical content 06/07/ Editorial Revised and edited the technical content 06/29/ Minor Clarified the meaning of the technical content. 07/23/ Editorial Changed language and formatting in the technical content. 09/27/ No change No changes to the meaning, language, or formatting of the technical content. 11/15/ Major Significantly changed the technical content. 12/17/ Editorial Changed language and formatting in the technical content. 03/18/ Editorial Changed language and formatting in the technical content. 06/10/ No change No changes to the meaning, language, or formatting of the technical content. 01/20/ No change No changes to the meaning, language, or formatting of the technical content. 04/11/ No change No changes to the meaning, language, or formatting of the technical content. 07/16/ No change No changes to the meaning, language, or formatting of the technical content. 2 / 246

3 Table of Contents 1 Introduction Glossary References Normative References Informative References Protocol Overview (Synopsis) Change Log Operations Publish and Un-publish Operations Check-In and Check-Out Operations Historical Versioning Operations Link Fixup Operations Lookup Relationships Operations Theme Operations Wide List Operations File Fragment Operations Relationship to Other Protocols Prerequisites/Preconditions Applicability Statement Versioning and Capability Negotiation Vendor-Extensible Fields Standards Assignments Messages Transport Common Data Types Simple Data Types and Enumerations Simple Data Types Change Log ListId Change Log ItemId Change Log DocId Change Log Guid Change Log Int Change Log ContentTypeId Change Log ItemFullUrl Change Log TimeLastModified Change Log ItemName Change Log Int Change Log SiteId Change Log WebId Bit Fields and Flag Structures Event Object Type Flags Event Type Flags Security Change Type Flags Delete Flags Document Flags Enumerations Relationship Delete Behavior Type Binary Structures Result Sets Site Collection Flags Result Set / 246

4 Distribution List Address Result Set Document Content Stream Transfer Result Set Document Version Content Stream Transfer Result Set Document Stream Storage Migration Result Set Document Version Stream Storage Migration Result Set File Fragment Result Set Tables and Views AllUserData Table NameValuePair Table NameValuePair_Latin1_General_CI_AS Table Collated NameValuePair Tables XML Structures Namespaces Simple Types Complex Types List Data Source Elements Attributes Groups Attribute Groups Protocol Details Server Details Abstract Data Model Change Log Operations Publish and Un-publish Operations Check-In and Check-Out Operations Historical Versioning Operations Link Fixup Operations Lookup Relationships Operations Theme Operations Wide List Operations File Fragment Operations Timers Initialization Message Processing Events and Sequencing Rules fn_rounddatetonearestsecond fn_unpackcsvstring proc_adddependency proc_addeventtocache proc_addghostdocument proc_addnewrowordtolist proc_addnewrowordtolistitem proc_al proc_appendfilefragmentdatabyid proc_cascadedeleteitems Deleted Documents Result Set proc_checkifexistingfieldhasduplicatevalues proc_checkifexistinglookupshavevalidparents proc_checkifrestoreneedstranlock proc_checkoutdocumentinternal proc_clonedoc proc_convertjunctiontolookup / 246

5 proc_convertlookuptojunction proc_copyurl NULL List Metadata Result Set Copied Directory Result Set proc_createlist List Metadata Result Set Id and Full URL Result Set proc_createsharedaccessrequest proc_createsite Site Owner Audit Mask Result Set Site Secondary Contact Audit Mask Result Set Site Administrator Audit Mask Result Set Site Author Audit Mask Result Set Site Contributor Audit Mask Result Set Site Browser Audit Mask Result Set Site Guest Audit Mask Result Set proc_createview proc_createweb Audit Flags Result Set proc_deleteallitemversions proc_deleteattachment proc_deleteattachmentsfolder proc_deletechanges proc_deleteeventlog proc_deletefilefragmentsbytag proc_deleteitemversion proc_deletesite Site Collection Flags Result Set Distribution List Address Result Set proc_deletesiteasync Site Collection Flags Result Set Distribution List Address Result Set proc_deletesitecoreasync proc_restoresite proc_deleteview proc_deleteweb Audit Flags Result Set proc_recycleweb Audit Flags Result Set proc_dirtydocwithforwardlinks proc_droplistrecord proc_droplistuniquefield proc_droplookuprelationship proc_ensuretranlocknotrequired proc_fetchfileformatmetainfo FileFormatMetaInfo Rowset proc_fetcholddoc Domain Group Cache Versions Result Set Domain Group Cache Back-End Database Server Update Result Set Domain Group Cache Front-End Web Server Update Result Set Document Version Metadata Result Set Document Version Content Stream Result Set Site Metadata Result Set / 246

6 Event Receivers Result Set Web Event Receivers Result Set Site Features List Result Set Web Parts Metadata, Nonpersonalized Result Set List Metadata Result Set List Event Receivers Result Set List Security Information Result Set Site Collection Custom Actions Result Set Site Custom Actions Result Set List Custom Actions Result Set List Web Parts Result Set NULL Content Type Order Result Set Navigation Context Security Information Result Set NULL Navigation Context Security Information Result Set Empty Navigation Context Security Information Result Set proc_filefragmentpermissioncheck proc_finddocs Found Docs Result Set proc_finishundirtylist proc_generateuniquefilename Unique File Name Result Set proc_getallattachmentsinfo List Attachments Result Set Document Attachments Result Set proc_getalllistsplusproperties AllListsPlus Properties Result Set proc_getchanges EventInformation Result Set EventDetails Result Set proc_getchangetoken Change Token Result Set Change Token Time Result Set proc_getcurrent EventInformation Result Set proc_getdocidurl proc_getfilefragmentsbyid proc_getfilefragmentsbytag proc_getfulllinkinfoforsingledoc Web List For Normalization Result Set NULL Individual URL Security Result Set Individual URL Security Result Set Document Link Information Result Set Document Setup Path Result Set proc_getlistdatalinks Web List For Normalization Result Set List Data Link Information Result Set proc_getlistdatasource List Data Source Result Set proc_getlistitemstreetodelete List Items Tree Result Set Restrict Delete Error Result Set proc_getnewlistitemid proc_getrelatedfieldsforlist / 246

7 List Related Fields Result Set proc_getsitedeletionbatch Site Deletion Batch Result Set proc_geturldocid Directory And Leaf Names Result Set proc_getweburlfromid proc_inserteventsubcriptionjunctionentries proc_insertitemintonamevaluepair proc_insertitemintonamevaluepaircollated proc_insertjunction proc_insertlistuniquefield proc_insertlookuprelationship proc_isfieldalookuprelationship proc_issitescheduledfordeletion proc_listthemefiles Theme Files Information Result Set proc_listthemes Theme Information Result Set proc_loadtheme Theme Files Information Result Set Theme INF File Information Result Set proc_logchange proc_logchangeforfilefragments proc_patchlinkforfile proc_patchlinkforweb proc_readsharedaccessrequests Shared Access Requests Result Set proc_refreshcheckout Document Metadata Result Set NULL Result Set proc_removejunctions proc_removesharedaccessrequest proc_renamehostheadersite proc_renamesite proc_savefileformatmetainfo proc_savefilefragmentbyid proc_savefilefragmentbytag proc_setlistdatasource proc_setnextid proc_startundirtylist Cache Parse Identifier Result Set proc_takeofflinedocument Document Metadata Result Set Event Receivers Result Set NULL Result Set Link Info Single Doc Result Set proc_undirtylistitem proc_updateentityidforlist proc_tranextendlockweb proc_tranlockweb proc_tranunlockweb proc_updatedirtydocument proc_updateiteminnamevaluepair / 246

8 proc_updateiteminnamevaluepaircollated proc_updatelookuprelationship proc_updateordernumber proc_updateversionvirusinfo proc_updateview proc_updatevirusinfo proc_updatewebpartlinks proc_userhasdataitems proc_validatelookupparents proc_validateuniquefields proc_validateuniquefieldscollated proc_verifylistitemstreetodelete proc_deletefilefragmentsbyid proc_deletefilefragmentsforcleanup proc_deletefilefragmentsforuserdatadelete proc_getdocstreamsforexternalmigration proc_getdocstreamsforinlinemigration proc_getdocstreamsforrbsmigration Remote Blob Storage Document Stream Migration Result Set proc_getdocversionstreamsforexternalmigration proc_getdocversionstreamsforinlinemigration proc_getdocversionstreamsforrbsmigration Remote Blob Storage Document Version Stream Migration Result Set proc_getstreamsforbackup Document Content Stream Backup Result Set Document Version Content Stream Backup Result Set proc_getstreamsforsitemove Document Content Stream Site Move Result Set Document Version Content Stream Site Move Result Set proc_ensuresiterbscollection proc_getstreamsforpresitemove Remote Blob Collection Identifier Preliminary Site Move Result Set Document Content Preliminary Site Move Result Set Document Version Content Preliminary Site Move Result Set proc_listrbsstoreswithids List Remote Blob Storage Stores With Identifiers Result Set proc_shallowcopyrbsblobs Timer Events Other Local Events Client Details Abstract Data Model Timers Initialization Message Processing Events and Sequencing Rules Timer Events Other Local Events Protocol Examples Change Log Link Fixup Themes Add Just Enough Fields to Cause Allocation of Additional Rows Per List Item Allocate New Rows While Inserting an Item into a Wide List / 246

9 4.6 Cascade Delete Relationship Behavior File Fragment Update Behavior Security Security Considerations for Implementers Index of Security Parameters Appendix A: Product Behavior Change Tracking Index / 246

10 1 Introduction This document specifies the Windows SharePoint Services: Content Database Document and List Item Management Communications Version 2 Protocol, which specifies the communication sequences used by the front-end Web server and application servers to perform data query and update commands on back-end database servers as part of document and list item management operations. Sections 1.8, 2, and 3 of this specification are normative and can contain the terms MAY, SHOULD, MUST, MUST NOT, and SHOULD NOT as defined in RFC Sections 1.5 and 1.9 are also normative but cannot contain those terms. All other sections and examples in this specification are informative. 1.1 Glossary The following terms are defined in [MS-GLOS]: access control list (ACL) access mask anonymous user application ASCII Component Object Model (COM) Coordinated Universal Time (UTC) domain file system GUID Hypertext Transfer Protocol (HTTP) Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS) language code identifier (LCID) security policy Unicode XML The following terms are defined in [MS-OFCGLOS]: 12-hour clock notation 24-hour clock notation alert alert subscription assembly assembly name attachment attachment identifier audit entry audit flag author back-end database server backward link base type base view identifier binary large object (BLOB) Boolean bot calendar type 10 / 246

11 cascading behavior cascading style sheet (CSS) change log identifier check in check out checked out class identifier (CLSID) co-authoring transition Collaborative Application Markup Language (CAML) collation collation identifier collation order column configuration database content database content type content type identifier CSS current user current version custom action customized data source datetime delete flag delete transaction identifier directory name dirty display name displayed version distribution list document document flag document identifier document library document store type document stream document version domain group draft dynamic page dynamic Web template editor address empty GUID Entity event event handler event object type flag event receiver event sink event type flag external group farm feature identifier 11 / 246

12 field field definition field identifier file file fragment file fragment identifier file fragment partition file fragment tag fixed schema folder form digest validation Forms folder forward link front-end Web server full URL fully qualified URL function group historical version history link host header HTTP entity tag HTTP GET HTTP HEAD hyperlink Hypertext Markup Language (HTML) indexed field internal version number Internet Information Services (IIS) item item identifier item order field leaf name level link bar link fixup list list identifier list item list item attachment list item identifier list schema list server template list template list view locked login name lookup field major version master page meeting instance Meeting Workspace site member metadict minor version 12 / 246

13 moderated object multilingual user interface (MUI) multivalued lookup field navigation structure page type parent site partition path segment permission permission level personal view policy provisioned published published version publishing level query read-only mode Recycle Bin Recycle Bin item relationship delete behavior relationship lookup field request identifier resource token restrict behavior result set return code rights role assignment role definition root folder row row ordinal security group security principal security provider security scope server-relative URL shared view site site collection site collection administrator site collection flag site collection identifier site collection quota site column site definition site definition version site identifier site-relative URL static page stored procedure store-relative form store-relative URL subsite 13 / 246

14 SystemID theme thicket thicket folder thicket supporting file top-level site transaction application lock transaction identifier Transact-Structured Query Language (T-SQL) uncustomized Uniform Resource Locator (URL) unique column constraint URL zone user identifier user interface (UI) version version view View view flag view identifier virus scanner Web application Web bot Web Part Web Part identifier Web Part Page Web Part property Web Part type identifier Web Part zone Web Part zone identifier Welcome page wide list XML namespace XML schema XML schema definition (XSD) zero-based index The following terms are specific to this document: calculated field: A user-defined field that can perform calculations by using the contents of other fields. list flag: An 8-byte unsigned integer bit mask that provides metadata about a SharePoint list. MAY, SHOULD, MUST, SHOULD NOT, MUST NOT: These terms (in all caps) are used as described in [RFC2119]. All statements of optional behavior use either MAY, SHOULD, or SHOULD NOT. 1.2 References References to Microsoft Open Specifications documentation do not include a publishing year because links are to the latest version of the technical documents, which are updated frequently. References to other documents include a publishing year when one is available. 14 / 246

15 1.2.1 Normative References We conduct frequent surveys of the normative references to assure their continued availability. If you have any issue with finding a normative reference, please contact dochelp@microsoft.com. We will assist you in finding the relevant information. Please check the archive site, as an additional source. [Iseminger] Microsoft Corporation, "SQL Server 2000 Architecture and XML/Internet Support", Volume 1 of Microsoft SQL Server 2000 Reference Library, Microsoft Press, 2001, ISBN , [MC-FPSEWM] Microsoft Corporation, "FrontPage Server Extensions: Website Management Specification". [MSDN-TSQL-Ref] Microsoft Corporation, "Transact-SQL Reference", [MS-FPSE] Microsoft Corporation, "FrontPage Server Extensions Remote Protocol Specification". [MS-TDS] Microsoft Corporation, "Tabular Data Stream Protocol Specification". [MS-WPPS] Microsoft Corporation, "Web Part Pages Web Service Protocol Specification". [MS-WSSCAML] Microsoft Corporation, "Collaborative Application Markup Language (CAML) Structure Specification". [MS-WSSEUX2] Microsoft Corporation, "Windows SharePoint Services: Content Database End-User Experience Communications Version ". [MS-WSSFO2] Microsoft Corporation, "Windows SharePoint Services (WSS): File Operations Database Communications Version ". [MS-WSSTS] Microsoft Corporation, "Windows SharePoint Services Technical Specification". [RFC1950] Deutsch, P., and Gailly, J-L., "ZLIB Compressed Data Format Specification version 3.3", RFC 1950, May 1996, [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997, [XMLNS] Bray, T., Hollander, D., Layman, A., et al., Eds., "Namespaces in XML 1.0 (Third Edition)", W3C Recommendation, December 2009, Informative References [MS-GLOS] Microsoft Corporation, "Windows Protocols Master Glossary". [MS-OFCGLOS] Microsoft Corporation, "Microsoft Office Master Glossary". [MS-WSSCCSP] Microsoft Corporation, "Windows SharePoint Services: Content Database Core List Schema and Site Provisioning Communications Protocol Specification". [MS-WSSCCSP2] Microsoft Corporation, "Windows SharePoint Services Content Database Core List Schema and Site Provisioning Communications Version ". [MS-WSSO] Microsoft Corporation, "Windows SharePoint Services Overview". 15 / 246

16 1.3 Protocol Overview (Synopsis) This protocol specifies the communication between the front-end Web server and the back-end database server used to satisfy requests involving the following operations: Change Log Operations Includes methods to retrieve or append entries to the change log. The Change Log contains information about item actions such as Add, Update, Delete, Rename, Move Away, and Move Into, at the list (1), site (2), site collection, and content database levels. An application could use this information to find out what changes have occurred on the data objects stored in the back-end database server. It could further use this information to implement synchronization features by replaying these events on a different site Publish and Un-publish Operations Includes methods to change the publishing level of a document in a list Check-In and Check-Out Operations Includes methods to check out and check in a document in a list Historical Versioning Operations Includes methods for managing the historical versions of a document or list item Link Fixup Operations A back-end database server and front-end Web server work together to implement link fixup. The back-end database server tracks forward links from list items to documents. When the back-end database server performs an operation that requires link fixup for list items, it defers potentially complex work by marking the list items needing link fixup as dirty. Later, before a front-end Web server retrieves list data, it checks the "list is dirty" status and, if the list is dirty, performs a link fixup operation before querying the data in the list Lookup Relationships Operations Includes methods to support relationships between lists (1) and the cascading behavior and restrict behavior when deleting list items in these lists (1) Theme Operations Includes methods to retrieve theme information for the purposes of applying a theme to the pages that belong to a site Wide List Operations Includes methods to create an unlimited number of fields for lists. The content database for a backend database server has a fixed schema. To accommodate for this, the concept of wide list and row ordinal were created. If the number of fields in a list of a particular type exceeds a fixed maximum for that type per row in the content database, then new rows are allocated for every list item in the list. 16 / 246

17 1.3.9 File Fragment Operations Includes methods to add, update, delete, and retrieve file fragments associated with a document. These objects are opaque implementation-specific data used by applications to enable additional features related to document editing. 1.4 Relationship to Other Protocols The following diagram shows the transport stack that this protocol uses: Figure 1: This protocol in relation to other protocols 1.5 Prerequisites/Preconditions The operations described by the protocol operate between a client and a back end-database server on which the databases are stored. The client is expected to know the location and connection information for the databases This protocol requires that the protocol client has appropriate permissions to call the stored procedures stored on the back-end database server. 1.6 Applicability Statement This protocol is intended for use by protocol clients and protocol servers that are both connected by high-bandwidth, low-latency network connections. 1.7 Versioning and Capability Negotiation Security and Authentication Methods: This protocol supports the SSPI and SQL Authentication with the Protocol Server role described in [MS-TDS]. 1.8 Vendor-Extensible Fields None. 1.9 Standards Assignments None. 17 / 246

18 2 Messages 2.1 Transport [MS-TDS] is the transport protocol used to call the stored procedures, query SQL views or SQL tables, return result codes, and return result sets. 2.2 Common Data Types This section contains common definitions used by this protocol Simple Data Types and Enumerations Simple Data Types Change Log ListId Change log ListId is a GUID and is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (list item) Event type 0x x x x x x x x x or 0x The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. 0x The identifier of the list (1). 0x x or 0x x x x x The identifier of the list (1) to which this list item was moved. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. The identifier of the list (1) that contains the list item. 18 / 246

19 Event Object Type = 0x (List (1)) Event type 0x The identifier of the list (1). 0x The identifier of the list (1). 0x The identifier of the list (1). 0x The identifier of the list (1). 0x The identifier of the list (1). 0x The identifier of the list (1). 0x The identifier of the list (1). Event Object Type = 0x (Site (2)) Event Object Type = 0x (site collection) Event Object Type = 0x (File) Event type 0x x x x x x x The identifier of the list (1) into which the file is being moved. The identifier of the list (1) from which the file is being moved. Event Object Type = 0x (Folder) Event type 0x x / 246

20 Event type 0x x The identifier of the list (1) into which the folder is moved. 0x x x The identifier of the list which the folder used to belong. 0x Event Object Type = 0x (alert subscription) Event type 0x x x The identifier of the list (1) that contains this alert subscription The identifier of the list (1) that contains this alert subscription. The identifier of the list (1) that contains this alert subscription. Event Object Type = 0x (security principal (2)) Event Object Type = 0x (security group) Event Object Type = 0x (Content type) Event Object Type = 0x (site column) Event Object Type = 0x (Security policy) 20 / 246

21 Event Object Type = 0x (View) Event type 0x x x The identifier of the list (1) that contains the view. The identifier of the list (1) that contains the view. The identifier of the list (1) that contains the view Change Log ItemId Change log ItemId is an integer and is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (list item) Event type 0x x x x x x x x x x x x x x x x The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The item identifier of the list item. The old item identifier of the list item. Event Object Type = 0x (List) Event Object Type = 0x (Site (2)) 21 / 246

22 Event Object Type = 0x (site collection) Event Object Type = 0x (File) Event type 0x x x x x x x The item identifier of the file inside the list which it is being moved into. The item identifier of the file inside the list which it is being moved away from. Event Object Type = 0x (Folder) Event Type 0x x x x x x x x The item identifier of the folder in the list (1) after the move. The item identifier of the folder in the list before the move. Event Object Type = 0x (alert subscription) Event type 0x x x The item identifier of the document, if this alert subscription is associated with this list item. If the alert subscription is associated with the list, this The item identifier of the document. The item identifier of the document. Event Object Type = 0x (security principal (2)) 22 / 246

23 Event type 0x x x Equal to Int0 if the security principal (2) added is active; otherwise SHOULD be the security principal (2) identifier, if the security principal (2) is active after the update, otherwise this MUST be NULL Event Object Type = 0x (security group) Event type 0x x x x x The identifier of the security principal which is added to the security group. The identifier of the security principal which is removed from the security group. Event Object Type = 0x (Content type) Event Object Type = 0x (site column) Event Object Type = 0x (Security policy) Event Object Type = 0x (View) Change Log DocId Change log DocId is a GUID and is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (list item) The document identifier (2) of the document associated with this list item. Event Object Type = 0x (List (1)) Event Object Type = 0x (Site (2)) 23 / 246

24 Event Object Type = 0x (site collection) Event Object Type = 0x (File) The document identifier of the document. Event Object Type = 0x (Folder) The identifier of the folder. Event Object Type = 0x (alert subscription) Event Object Type = 0x (security principal (2)) Event Object Type = 0x (security group) Event Object Type = 0x (Content type) Event Object Type = 0x (site column) Event Object Type = 0x (Security policy) Event Object Type = 0x (View) Change Log Guid0 Change log Guid0 is a GUID and is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (list item) Event type 0x x x x x x / 246

25 Event type 0x x x x x x x x x x The identity of the list used to contain the list item. Identifier of the security scope where the role assignments are added. Identifier of the security scope where the role assignments are deleted. The identifier of the list that this list item was moved to. Event Object Type = 0x (List (1)) Event type 0x x x x x x x x x When a Field is deleted from the List (1), this value is the identifier of the Field. Otherwise, this value Identifier of the security scope where the role assignment is added. Identifier of the security scope where the role assignments are added. Identifier of the security scope where the role assignment is deleted. Identifier of the security scope where the role assignments are deleted. Event Object Type = 0x (Site (2)) Event type 0x x x x x Identifier of the security scope where the role definition is added. 25 / 246

26 Event type 0x x x x x Identifier of the security scope where the role definition is deleted. Identifier of the security scope where the role definition is modified. Identifier of the security scope where the role assignment is deleted. Identifier of the security scope where the role assignment is added. 0x Event Object Type = 0x (site collection) Event Object Type = 0x (File) Event Object Type = 0x (Folder) Event Object Type = 0x (alert subscription) Event Type 0x x x The identifier of the alert subscription. The identifier of the alert subscription. The identifier of the alert subscription. Event Object Type = 0x (security principal (2)) Event Object Type = 0x (security group) Event Object Type = 0x (Content type) Event Object Type = 0x (site column) Event Object Type = 0x (Security policy) 26 / 246

27 Event Object Type = 0x (View) Event Type 0x x x The identifier of the list view. The identifier of the alert subscription. The identifier of the alert subscription Change Log Int0 Change log Int0 is an integer and is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (list item) Event type 0x x x x x x x x x x x x x x x Old Identifier of the List Item. If the Change Log Int1 of the same Change Log Entry ("Int1") is NULL, this value MUST be -1. If Int1 is greater than or equal to 0x , this value is the Security Principal Identifier of the role assignment that is added. If Int1 is NOT NULL and less than 0x , this value is the Security Principal Identifier which has made the role inheritance change. If the Change Log Int1 of the same Change Log Entry ("Int1") is NULL, this value is the Security Principal Identifier that is removed from all Roles. If Int1 is greater than or equal to 0x , this value is the Security Principal Identifier that is removed from the Role specified by Int1. If Int1 is not NULL, and less than 0x , this value 27 / 246

28 Event type 0x Current Identifier of the List Item. Event Object Type = 0x (List) Event type 0x x x x x x If the change log Int1 of the same change log entry ("Int1") is NULL, this value MUST be - 1. If Int1 is greater than or equal to 0x , this value is the security principal identifier of the role assignment that is added. If Int1 is NOT NULL and less than 0x , this value is the security principal identifier which has made the role inheritance change. 0x If the change log Int1 of the same change log entry ("Int1") is NULL, this value is the security principal identifier that is removed from all roles. If Int1 is greater than or equal to 0x , this value is the security principal identifier that is removed from the role specified by Int1. If Int1 is not NULL and is less than 0x , this value MUST be NULL. Event Object Type = 0x (Site) Event type 0x x x x x x x x x SHOULD be the Security Principal Identifier who is adding this role definition. If the change log Int1 of the same change log entry ("Int1") is NULL, this value is the security principal identifier that is removed from all roles. If Int1 is greater than or equal to 0x , this value is the security principal identifier that is removed from the role specified by Int1. If Int1 is not NULL, and less than 0x , this value MUST be NULL. 0x If the change log Int1 of the same change log entry ("Int1") is NULL, this value MUST be - 1. If Int1 is greater than or equal to 0x , this value is the security principal identifier of the role assignment that is added. If Int1 is NOT NULL and is less than 28 / 246

29 Event type 0x , this value is the security principal identifier which has made the role inheritance change. 0x Event Object Type = 0x (Site Collection) Event Object Type = 0x (File) Event Object Type = 0x (Folder) Event Object Type = 0x (Alert Subscription) Event Object Type = 0x (Security Principal) Event type 0x x x Identifier of the security principal added. User identifier. Security principal identifier. Event Object Type = 0x (Security Group) MUST be Group Identifier. Event Object Type = 0x (Content Type) Event Object Type = 0x (site column) Event Object Type = 0x (Security Policy) Event Object Type = 0x (View) 29 / 246

30 Change Log ContentTypeId Change log ContentTypeId is a numeric string value of arbitrary but limited length. It is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (List Item) Event Object Type = 0x (List) Event Object Type = 0x (Site) Event Object Type = 0x (Site Collection) Event Object Type = 0x (File) Event Object Type = 0x (Folder) Event Object Type = 0x (Alert Subscription) Event Object Type = 0x (Security Principal) Event Object Type = 0x (Security Group) Event Object Type = 0x (Content Type) Event type 0x x x The content type identifier of the content type. The content type identifier of the content type. The content type identifier of the content type. Event Object Type = 0x (Field Template) 30 / 246

31 Event type 0x The identifier of the field. Event Object Type = 0x (Security Policy) Event Object Type = 0x (View) Change Log ItemFullUrl Change log ItemFullUrl is a Uniform Resource Locator (URL) of store-relative form. It is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (list item) Event type 0x x x x x x x x x x x x x x x x URL in Store-relative form of the document URL in Store-relative form of the document URL in Store-relative form of the document URL in Store-relative form of the document URL in Store-relative form of the document URL in Store-relative form of the document MUST be NULL URL in Store-relative form of the document URL in Store-relative form of the document The new URL in Store-relative form of the document MUST be NULL URL in Store-relative form of the document URL of the security scope where the role assignment is added. This value MUST be NULL if the Change Log Int0 of the same Change Log Entry is also NULL URL in Store-relative form of the document URL in Store-relative Form to the security scope. MUST be NULL Event Object Type = 0x (List (1)) 31 / 246

32 Event type 0x x MUST be NULL MUST be NULL 0x URL in Store-relative form of the list (1) 0x x x x MUST be NULL MUST be NULL URL of the security scope where the role assignment is added. This value MUST be NULL if Change Log Int0 of the same Change Log Entry is NULL URL in Store-relative Form to the security scope. Event Object Type = 0x (Site (2)) Event type 0x x x x MUST be NULL MUST be NULL URL in Store-relative form of the site (2), if this site (2) is deleted. This value MUST be NULL if the Site is converted into a folder under its parent site. MUST be NULL 0x URL in the Store-relative Form of this site (2) 0x x x x x x MUST be NULL URL in Store-relative Form to the security scope. URL in Store-relative Form to the security scope. URL in Store-relative Form to the security scope. URL in Store-relative Form to the security scope. MUST be NULL Event Object Type = 0x (Site collection) Event Object Type = 0x (File) SHOULD be NON-NULL. If NOT NULL it MUST be store-relative form of the document. Event Object Type = 0x (Folder) Event type 0x URL in Store-relative form of the Folder 32 / 246

33 Event type 0x x x x x x x URL in Store-relative form of the Folder URL in Store-relative form of the Folder New URL in Store-relative form of the Folder New URL in Store-relative form of the Folder after the move URL in Store-relative form of the Folder URL in Store-relative form of the Folder URL in Store-relative form of the Folder after the move Event Object Type = 0x (Alert subscription) Event Object Type = 0x (Security principal (2)) Event Object Type = 0x (Security group) Event Object Type = 0x (Content type) Event Object Type = 0x (site column) Event Object Type = 0x (Security policy) Event Object Type = 0x (View) Change Log TimeLastModified Change log TimeLastModified is a timestamp and is part of a change log entry. This data has different meanings based on the event object type and event type data of the same change log entry. The possible meanings of this value are specified as the following: Event Object Type = 0x (List item) Event type 0x x Time when the comment is created. Time when the comment is updated. 33 / 246

34 Event type 0x x x x x x x x x x x x x x Time when the comment is deleted. Time when the comment is closed. Time when the comment is activated. Time when the Add happened. Time when the event (1) happened. Time when the list item is updated. Time when the delete happened. Time when the rename happened. Time when the restore happened. Time when the event happened. Time when this update happened. Time when the update happened. Time when the event (1) happened. Time when the move happened. Event Object Type = 0x (List (1)) Event type 0x x x x x x x Time when the list (1) was created. Time when the update happened. Time when the list (1) was deleted. Time when the list (1) was renamed. Time of occurrence when the list was restored from the Recycle Bin. Time when the event (1) happened. Time when the event (1) happened. Event Object Type = 0x (Site (2)) Event type 0x x x x Time when the site (2) was created. Time of the update. Time when the event (1) happened. Time when the site (2) was renamed. 34 / 246