Can we stop a Macro Agent to update a document

HCL Domino Domino Forum
1

I have this following scenario here and will be grateful if some one can help me on this:

I have a user to a database who is having Editor Access in the ACL. I donot want that this user updates the admin related document(s) in the database, s/he can read the documents but can not edit them.

I have achieved this by using Lotus script by using the roles or adding the script at the form events.

But my Problem is that in case the user is a smart one/Techincal person, s/he can create a Macro written in Formula Language and can easily update the selected document in the view and then running the macro code since s/he is editor to the database.

I have tried this by manipulating the saveoptions field also but in vain.

Can anyone help me stopping this tech user from editing the admin document(s) by using the Macro code. I do have the idea that in case person is having Author Access in the ACL s/he can easily be stopped from doing this mischief.

Many Thanks.

2

Subject: Can we stop a Macro Agent to update a document

Hi,a (tech) user with editor access can modify every document by backend methods if he can read the document.

So from my opinion you should:

-reduce the tech users to author access in the ACL

-define an additional role for instance [editacc]

-provide the former editors with this role in the ACL

In addition its necessary to provide AuthorAccess for users with the role [editacc] to all documents except the admin related ones. Extend the user-editable documents by the use of Author fields which contain the new role.

regards axel