Hello together!
What counts more in ACLs */Certifier entries or Group entries?
Are */Certifier entries equal to Groups or to Names in the ACL?
Thank you for your help
Subject: ACL entries - 6.0.1 release notes
Change to order of evaluation for ACL entries
In Notes/Domino 6, if a group entry and a wildcard entry in a database ACL both apply to a user attempting to access the database, the user has the access assigned to the group entry. For example, if the group “Sales” has Reader access and the wildcard entry */West/Acme has Manager access, and both entries apply to a user, the user has Reader access to the database.
In prior releases, group and wildcard entries in the ACL were given equal weight.
Subject: ACL entries
I have always been told that the order is as follows:
-
Username
-
Group
-
*/Certifier
If your name is listed as a lower ACL setting as a group that you belong to then the name wins and that is the access you get.
If your name is not listed in the ACL then it looks to the groups. You get the highest access based on the groups. If one group has editor and the other has author your get editor if you are listed in both groups.
Check out the help document in the administrator help database titled:
Acceptable entries in the ACL
The last section of that document explains the order in more detail.