HI,
What is the minimum access required in the ACL to access personal view/folders.
Reader or Author?
HI,
What is the minimum access required in the ACL to access personal view/folders.
Reader or Author?
Subject: basic ACL question
Reader if you check off the option (Create personal folders/views)
Subject: basic ACL question
Does this technote apply in anyway to you?
Subject: basic ACL question
Here is the code
Sub Click(Source As Button)
Dim ws As New NotesUIWorkspace
Dim uidoc As NotesUIDocument
Dim db As NotesDatabase
Dim ses As New NotesSession
Dim collection As NotesDocumentCollection
Dim doc As NotesDocument
Dim SearchFormula$, answer%,Msg$,answer1%,Msg1$
Dim view As Notesview
Dim uidb As NotesUIDatabase
Dim currdoc As NotesDocument
Set uidoc=ws.currentdocument
Set currdoc = uidoc.Document
Set db=ses.Currentdatabase
'--------------------------
Dim views As Variant
views = db.Views
v = Ubound(views)
For i = 0 To v
If views(v - i).Isprivate And views(v - i).Name = "ArcSearchReport" Then
’ Messagebox( "Private View - " + views(Ubound(views) - i).Name )
Set view = views(v - i)
Exit For
End If
i = i + 1
Next
Set doc=view.GetFirstDocument
If Not (doc Is Nothing) Then
Msgbox "Please clear the previous result documents from your personal folder?"
Exit Sub
End If
Call uidoc.Refresh
searchFormula$ = uidoc.FieldGetText("SearchFormula")
If searchFormula$ ="" Then
Msgbox "Please enter the value in the field and Click on the correponding AND check box for searching." ,16,"Enter field value"
Exit Sub
End If
Dim dateTime As New NotesDateTime( "06/01/99" )
Dim nextDateTime As NotesDateTime
Set collection = db.Search( searchFormula$, dateTime, 0 )
Call Collection.PutAllInFolder( "ArcSearchReport" )
currdoc.ResultCount = Collection.count
Call uidoc.Refresh
If Collection.Count = 0 Then
’ Msgbox “Sorry, there were no documents matching your search request.” ,64,“Search Results”
Exit Sub
End If
’ Call view.Refresh
’ Call uidoc.close
’ Call ws.ViewRefresh
End Sub
Subject: RE: basic ACL question
Note: A bit of a rambling answer… there’s something to try at the end.
I’m assuming that your users are getting the error “You are not authorised to perform that operation” on the line:
Call Collection.PutAllInFolder( “ArcSearchReport” )
Is there any more detail to the error message, for example does it say “You are not authorized to perform that operation: Sorted Doc Collection”?
If you enable LotusScript debugging for one of these problem users, you should be able to see exactly which line is triggering the error.
You say that “This problem is for specific users only.” I assume this means that some users with Reader access to the DB can do this fine, and others cannot.
If that’s the case, then I would focus on what distinguishes the two groups of users.
Here’s one guess. Maybe at some point you have had the “Create Personal Folders/Views” option disabled for Default. If so, any reader using this feature during that point would have created the “ArcSearchReport” folder in desktop.dsk of the client they were then using.
As far as I understand it, even if you later enable the “Create Personal Folders/Views” option, that folder will remain stored in desktop.dsk unless you delete it and recreate it. That normally should not cause any problem, but if desktop.dsk then became corrupted, I could imagine there might be a problem. (There’s another reason this could be the cause at the end of the posting.)
I see that you’re not alone in having this problem: http://www-10.lotus.com/ldd/nd6forum.nsf/55c38d716d632d9b8525689b005ba1c0/0e90a089aec531d7852573db0056eff8?OpenDocument&Highlight=0,PutAllInFolder,access
Unfortunately, no-one seems to have found a solution to that problem.
Here’s another post with a similar issue:
But I’m not sure that I trust the advice that you need to enable Editor access with Delete rights.
This third post also seems similar:
The way I read this unanswered post there’s an implication that you might be able to use PutAllInFolder on private folders stored in the database, rather than in desktop.dsk. If that’s really the case, then perhaps some of your users’ personal “ArcSearchReport” folders are stored in desktop.dsk and some in the database (because of an ACL change), and the action is failing for those users who have them stored in desktop.dsk. Try getting a user who’s experincing this issue to delete the current private folder, close the database (to be sure) and then re-open it and try the search action.
Finally, there’s a bunch more discussion of errors with POFU views and folders here, which might contain some clues:
Let me know how that goes and if your investigation turns up more clues.
Rupert Clayton
Chicago
Subject: another link
This may also relate to your problem.
Access permissions on the folder itself:
http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21099343&loc=en_US&cs=utf-8&cc=us&lang=en
Subject: RE: basic ACL question
They are getting the error:
Notes error : You are not authorized to perform that operation(XYZ search query)
This is that exact error what the users are grtting.
This is a production issue.
cheers
suman
Subject: basic ACL question
All Readers and above can create private views and folders (though many will not know how.)
For users with for Reader-, Author- and Editor-level access, if the ACL option to create private folders/views is disabled, these are stored in the user’s desktop.dsk. If the option is enabled (and for all Designers and Managers) then they’re stored in the database itself.
Of course, the views/folders can only display data from documents that the user would normally have access to.
Rupert Clayton
Chicago
Subject: RE: basic ACL question
Hi Rupert,
I my application default ACL access is reader with additional previlege create private folders/views is enabled but still the users are getting “You are not authorised to perform that operation” .
what may be the reason ?
any idea…
Subject: RE: basic ACL question
Here are some possibilities:
Maybe the users are covered by some other ACL entry that doesn’t have create folders/views rights.
How are users trying to create this view or folder? Directly, through the menu option Create - Folder or Create - View, or indirectly, through an action or an agent? Maybe the action/agent code requires some other access they don’t have. Maybe the action or agent requires membership of a role that the users don’t have.
Test whether users can create the private view or folder using the menu option.
If the database exists as multiple replicas, are you sure the ACL on the server that the users are using gives them this access?
Is this issue happening for all users or just one? (Could be corruption of desktop.dsk or cache.dsk)
If none of that fixes the issue, please post some more details of the application, the ACL and how you’re trying to create these private folders or views.
Rupert Clayton
Chicago
Subject: RE: basic ACL question
Hi Rupert,
First thanks for ur quick response.
This problem is for specific users only.
In this DB there is no individual entry.
user creating folders / views through an action button and the folder type is shared,Private on first use.
There is a group added in the ACL has more users have READER access and creating personal folders / views enabled.
I am wondering why this is happening to the specific users…
cheers
suman.
Subject: RE: basic ACL question
Can you post the code from the action button?
Rupert