Controlled access section or Field access security

HCL Domino Domino Forum
1

Hi All

In a workflow application, I have a form with a few controlled access sections. The access to the sections is assigned via Lotus Script as the document progresses in the workflow. The access is give to a few roles and also to the currentassignee(which is a field) in the form.

For example: one of the section field name is Fix_Description and this section has one field called FixDescription in it. Users who should be able to edit the FixDescription field should either have [SIT Mgr] role or should be the CurrentAssignee.

When I look at the document properties, the field Fix_Description has value

“[SIT Mgr]”

“Jo Bloggs”

where Jo Bloggs is the Current Assignee.

Problem is that users with [SIT Mgr] role CAN edit this section, i.e. FixDescription field, but not Jo Bloggs.

Can anyone please advice, what might be going wrong?

Is there any other way to implement field edit access?

Thanks

Alpna

2

Subject: Thanks a lot for the suggested solution. I will try the suggested solution

3

Subject: Controlled access section or Field access security

Make sure your sections are Computed. Also if you are using script to modify them, you may need to make sure the document is saved, closed and reopened. I normally don’t assign section values with script, I prefer using formula language for calculating the roles and they work great.

Hope this helps,

Victor

www.dominoweb.biz

4

Subject: RE: Controlled access section or Field access security

you should be using the caniconical name for this. So the field should be

“[Role]”

“CN=John Doe/OU=Sales/O=Co”

Here’s the help text from @name

This example returns CN=MaryTsen/ OU=Illustration/OU=Documentation/OU=Development/OU=R&D/O=Acme/C=US if that is the current user ID. The hierarchy of the current user ID is appended to the name; no lookup occurs in the Address Book.

@Name([Canonicalize];“Mary Tsen/”)

thanks

barry

5

Subject: Make sure you use the canonicalized username, not the common name as you have shown here.

6

Subject: Controlled access section or Field access security

I would try putting Jo’s full name in the field, ie “CN=Jo Bloggs/OU=aaa/O=bbb”