ACL- roles

HCL Domino Domino Forum
1

Hi peoples

I’m kindoff new to ACL and Roles. I have some difficulties with these settings for my application.

It is a database that is being used by different plants of a company.

The database is being used by the safety manager of a plant.

I woul make a role for each plant and assign it to the safety manager of that particular plant.

But what do I have to do now so that only the peoples with the role safetymanager can create documents

and that the safety managers can only edit the documents from their own plant (=role)

Can somebody help me please because I don’t really get it. And I don’t really know how an authorsfield works or how you can use it

Thanks in advance

Greetz

2

Subject: Yes, there could be only one role for all the managers

but I personally don’t like to use authors fields. I prefer to separate them from documents they should not see by creating different views, as for each plant, and then restricting them at the navigator level based on their different roles. I think having authors fields are just too difficult to maintain. But that’s just my humble opinion :slight_smile: Cathy

3

Subject: RE: Yes, there could be only one role for all the managers

That is of course completely insecure. There are plenty of ways to get to documents that you are ‘separated’ from. ONLY restricting users via Authors and Readers fields is truely secure.

Users could make personal views, access hidden views, conduct searches, access web views and prolly more I’m not thinking of.

Readers and Authors fields are tricky but important to learn.

4

Subject: ON the Database ACL click the second choice

Roles and add the name of each plant role. Now go back to the basics tab and add your members – you click your address book to find their proper names, just as you would for email. Assign them editor access, so user type Person, access editor (on the right). Make sure the first checkbox, Create documents, is checked. You don’t necessarily have to use authors fields to control who can see what. You can control that through your views and what is available to them from a navigator: use buttons on the navigator that only work is the person has the specific role for his plant. hth CAthy

5

Subject: ACL- roles

Create the SafetyManager roles and assign them as you described. I don’t think you need a role for each plant (but you could do that). People assigned the SafetyManager role should have Author access.

Go your form’s properties, security tab: turn off ‘All Authors’ and choose only the SafetyManager role for the property: ‘Who can create documents using this form’

(you could also pick multiple roles here, if you created a role for each plant)

On the form itself, create an Authors field (computed when composed) to capture the author’s name via the formula: @UserName

Result: Only users with the role can create the document. Once created, the document can only be edited by the author.

(Editors and above in the ACL would also be able to edit the document – you would want to severely limit who has these higher ACL levels).