Groups, ACL, local replica, readers fields and wrong documents

HCL Domino Domino Forum
1

Hi All,

Iám having a strange problem using readers fields, group names and a local replica of a databasa.

I have a database with one readersfield. In this readersfield there’s a group name. Let say group1. A couple of documents are protected using this group. Other documents are protected using differents groupsnames.

User John is member op group1. When he replicates the database to his workstation everthing works OK. He only sees the documents which have group1 in the readers field.

When i switch user John to group 2 then when he accesses the database on the network he nolonger has access to his previous documents and he sees only documents belonging to group 2. This is working OK.

However he still sees documents from group1 in his local replica. Even after a 1 day the local replica still does not get the “new” documents nor the old ones are deleted. Only when i change the ACL (en change is back) the old documents are gone but documents belong to group 2 are not replicated.

When a document gets modified at the server then that documents gets replicated.

Clearing the replication history solves temporeraly this problem.

Any ideas ?

How gets the groupmemberlist localy get updated?

How does the client now that the group has changed ?

Thanks

Arnold

2

Subject: groups, ACL, local replica, readers fields and wrong documents

When you take a local replica of a server database, and your access to that server database is through a group, a “hidden” ACL entry is created for your user ID with the same authority as the group.

This is done so you still have access even when working in disconnected mode, and Notes cannot access the group to check your access.

Thus, groups are NOT used to control access to local replicas, other then at the time the replica was created (and probably replicated to pick up changes)