Recently I discovered that I could assign an Administration Server to a database to which I did not have Manager access if I used Domino Administrator and had multiple databases selected.
For example, on the Files tab of Domino Administrator, I selected two databases. I had Manager access to one of the databases but Reader access in the other. When using the Manage ACL tool, I was able to assign an Administration Server to both databases. However, if trying to assign an Administration Server to one database at a time, I could not do so unless I had Manager access to the database.
Is this the behavior I should expect from the Manage ACL tool when assigning an Administration server?
Subject: Assigning Admin Server using Database Tools
No, the admin client should not allow you to do anything that you’re not allowed to do. Did it really happen, though? Did you go back into the ACL and see that the change actually occurred? Were you in full Access Administration mode?
Subject: RE: Assigning Admin Server using Database Tools
Yes, it really happened. I did go back to the ACL to confirm that the change actually occurred. In fact, I tried it several times – even on different servers. I did not have Full Access Administration turned on but I was in the Administrators field of the server documents.
Subject: Not entirely true
Specific admin tools in the Domino Administrator client allow you to perform administrative action IF you are a server administrator, EVEN if you do not have full admin access enabled. This is true for all admin tools which essentially do not “read” data in documents but do administrative actions. This has been true since Notes V3.