OK I’ve got a real stumper here. The scenario, we have an application designed to update values in the main Domino Directory. The problem is whenever we try we get the error message “You are not authorized to perform that operation.” Now the person running the application has the proper access, but still can’t make it work. Here’s where it get’s weird. If we create a new database based on the Domino Directory template, populate it with the values from our current Domino Directory, and set the ACL for that database identical to the original database… Then the person in question can update the database just fine. If we copy the identical ACL from the new database to the ACL of the old database (i.e. overwriting the old ACL) we can then update the original Domino Directory. But before going with this new identical copy of the original ACL, I want to know what I’m missing. Why won’t the original ACL work, and a newly created exact of it copy will? I put the original ACL back for now, but I’m hoping someone can explain what is going on here?
Subject: Fascinating ACL Issue…
there is such things as “corrupted ACLs”
one example: use LotusScript to add an ACL entry, but forget to use Canonical name (use only Abbreviated)
“John Doe/ACME/US”
instead of “CN=John Doe/O=ACME/C=US”
both entries will look the same
actually both can be added!
using first entry, of both, will lead to a corrupted ACL, which only Lotusscript could fix.