Adding and Removing ACL Entries with Script (Security Problem)

This is my first time really using script to change an ACL. I have a “Control Form” that I’d like for local system administrators (Editors) to be able to use to determine who has access to the database and their Roles, etc. The problem is that I don’t want to grant these people manager access to the database and my code doesn’t work for them now because they don’t have access to edit the ACL since they are only Editors.I thought creating an Agent that did the ACL Entry adding and removing would work, since I signed the Agent. I even tried the “Run on Behalf of” option and I still couldn’t get it to work.

Any ideas would be appreciated greatly.

Regards,

Justin

Subject: Adding and Removing ACL Entries with Script (Security Problem)

Have you considered using the Catalog.nsf instead? Sure, it truncates long group names, but in most cases it’s all they should need.

If you want the agent to work, you’ll want it to runonserver

Subject: RE: Adding and Removing ACL Entries with Script (Security Problem)

Thanks for your response Peter. I’m not very familiar with Catalog.nsf, I did some reading about it after I got your post and can’t quite envision how I could integrate that into my application.

I also tried runonserver, and the prompts that are part of the code never executed.

Subject: RE: Adding and Removing ACL Entries with Script (Security Problem)

Thanks for your response Peter. I’m not very familiar with Catalog.nsf, I did some reading about it after I got your post and can’t quite envision how I could integrate that into my application.

I also tried runonserver, and the prompts that are part of the code never executed.

Subject: RE: Adding and Removing ACL Entries with Script (Security Problem)

I guess I misread your first post - by determine I thought you meant “find out”, not “choose/make changes”.

If they need to change it, but not have manager access, you need to code to run as a manager. Do the prompts in the form or in an action, then have an agent runonserver to actually make the changes to the database (say, after your “profile” form has been changed).

Subject: RE: Adding and Removing ACL Entries with Script (Security Problem)

OK, I’ll try that. Thanks.

Subject: RE: Adding and Removing ACL Entries with Script (Security Problem)

OK, I’ll try that. Thanks.