Hi,just wondering if there is a way to change/standardise multiple selected Mail file’s ACL’s in one fell swoop?
I thought "Enforcing a consistent access control list " may be the way but I feel either I’m missing something or I’m barking up the wrong tree. Feels like it is just for replicas.
Alot of our ACLs have too high an Access level. I want to lower this and also modify the Attributes… (select/unselect - “Create Private Agents” etc…)
Thanks in advance for any help you can give me
Subject: ACL - Multiple Databases
Enforcing consistent acl is just for replicas, it ensures that the acl is maintain across all replicas otherwise it will not replicate, it also ensures that local replicas maintain the acl security
But you did ask if there was a way of changing the acl’s for lots of databases in one go, and that has been answered for you.
Use the admin client, files view, select all the databases you want to manage and then select access control manage, you can then add remove modify entries and their attributes
Subject: RE: ACL - Multiple Databases
Thanks to all.I figure I didnt think this one out properly. Would using the aforementioned method reduce all ACLs in the selected NSF files to the same level? Including Domino Admins etc…?
Subject: RE: ACL - Multiple Databases
You seem to be thinking about something that would affect system wide access levels for one person. ACLs work on a per database level, not per user.
What you are thinking of is probably Groups - the best way to manage ACLs - but that needs to have been set up in all the databases of concern. When you have well-defined groups, and all your dbs use those groups in all their ACLs, then you can change a person’s system-wide access rights by simply moving their name between groups.
Subject: RE: ACL - Multiple Databases
Thanks for that Charles, you’ve given me a good bit to think over.
Subject: Solution - ACL - Multiple Databases
Found a nice easy solution…Use ServerAdmin Plus to edit specified NSFs ACLs for desired names all at once
Subject: ACL - Multiple Databases
Go to Domino Administrator, Click the files tab and select multple databases using control key on your key board and right click on it and select Manage ACL option.
Hope this helpes u…
Subject: RE: ACL - Multiple Databases
Yeah I was looking at that… the consistent Acl approach, but the more I think about it the more I feel its not the right way.
Surely I should be modifying the ACL access of the users (rather than focusing on nsf acls per se), which will impact on ALL NSF files they access.
Subject: RE: ACL - Multiple Databases
Follow the above way, i had given to you.
Subject: RE: ACL - Multiple Databases
as you have already heard “Enforce Consistant ACl” is a replication setting and is also a security issue so that people can not abuse the ACL on their local replica copy.
Being able to manipulate the ACL of multiple databases has been significantly improved in the Admin Client, but it still leaves much to be desired. We have developed Workflo!ACL Manager that allows for batch ACL updates to one or more databases without having to open the database. In addition you can query the ACL of all (or selected) Dbs to see what access a specific individual has. In any case our clients find it to be a very usefull tool that has saved many Admins a lot of hours or slugging through their ACLs. You can download a demo from our site at http://www.wfs.com