Document security -

Hello, I need your opinion.I need to restrict some documents for some people with reader fields. That people are in some real group like administrators, vendors, HHRR, etc.

What do you recomend to me?

Roles (mmmm: developer dependence)

Groups (in domino directory)

Groups (in application with render in every document creation- problems with groups modifications and old documents).

Others.

Thank you in advance

Guillermo

Subject: document security -

I would recommend using a Role to restrict access. Then You can assign any group from the directory to have the role You desire and You can even change the name of the group without having to change the old documents readers fields.

Subject: RE: document security -

the problem with roles is when I need more roles in existing aplications!Example:

areas/roles:

*Administration

*Sales

*Production

Two month later I need another area/role:

*I.T. Resources

What can I do, I do not have that role and not easy to add .

Thank you in advance

Subject: RE: document security -

Well, I think You have misunderstood the meaning of roles -

Roles should not reflect organizational units; It should reflect who should be able to read the documents regarding the context of the document.

I would in this case create a role called DocReader and make the Readersfield contain this role and next create groupentries in the ACL:

*Administration

*Sales

*Production

and enable the role ‘DocReader’ for each of these groups (that exists in the directory). Then it is a simple ACL task to allow another group to access the document(s).

hth

Subject: RE: document security -

mmm I undestand roles, thank for you sugestion but , I still have the problem.What happend if I need to add roles , I understand how to add groups in acl with roles, but, when I add roles, how I show roles in lists when a user must select readers.

Sorry for my english

Subject: RE: document security -

you fetch them dynamicallydatabase.acl.roles

is that a problem?

Subject: thank you

you are right. I will try with lotusscript.Thank you very much