Groups not working in DB's ACL (Help)

HCL Domino Domino Forum
1

This has me stumped.

Created 2 new groups, group-type=Access control Only. Added users to group. added groups to database.

ACL for database set as the following:

Default: no access

Export group (new group) user-type= person group, Access= manager access

Users within export group cannot open database. Effective access displays full access! What the hell is going on, please help I HAVE BEEN GRAPPLING WITH THIS FOR SOME TIME.

if i add the users in individually it works, why is the group not working? I have tried to recreate the group but same problem. Is it the database or the group?

2

Subject: Groups not working in DB’s ACL (Help)

If you have eliminated all configuration issues (nested group memberships usually cause this type of problem), then it is possible you have the somewhat rare case of a corrupt ACL. If that is the problem, create a new database without copying the ACL. Repopulate it manually and see if it fixes the problem.

3

Subject: Groups not working in DB’s ACL (Help)

  1. Make sure the you are connected to the server hosting the names.nsf file. Else notes will not be able to fetch the group details from the server and will hence treat them as non existant entries.

  2. It takes some time for the server to take/reflect the changes done to the group document. Please wait 10-15 mins after making the changes.

Also try setting “Enforce Consistent acl…” setting from the advacned tab of the acl. It will get the group subscription info for the connected user…

4

Subject: RE: Groups not working in DB’s ACL (Help)

Thanks Amith for replying.

All the above checks out?

server access: checked

Consistant ACL across replica’s: checked

Waited 2 hours: checked

Do you have any other ideas?

5

Subject: RE: Groups not working in DB’s ACL (Help)

Hi Rose, As per my knowledge,individual user access overrides the group access.

eg;Person “A” has designer access in the db and the same person is available in group with in the same database and that group has managet accees. Finally the effective access to person “A” is "Designer only. Check if that person is available in both group as well as individual in ACL list.

Thanks

Guru

6

Subject: RE: Groups not working in DB’s ACL (Help)

Again thanks guru.

have removed all individual entries just using group ACL only. users with in group cannot access.

Any further let me know but again thanks for help.

7

Subject: RE: Groups not working in DB’s ACL (Help)

Jean,

We are experiencing the identical issue, 16 months later using Domino 8.0.1. Its been quite annoying. Did you ever get a resolution on this issue?

8

Subject: RE: Groups not working in DB’s ACL (Help)

Thanks for the reply…

My original setup was only one group with no individuals. i have had to add individuals as the group would not give them access as default was set to no access.

I would like to remove individual access. this is happening on a lot of my groups not all but quite a few! don’t know why?

9

Subject: Groups not working in DB’s ACL (Help)

It sounds like you’ve checked the names.nsf the application is located upon and the group exist there and the people are a member of that group.

But also check their home mail server and their names.nsf. For their home mail server again makes sure the group is there and their name is listed as part of the group.

Check their local address book, make sure they don’t have a local copy of the group that maybe causing problems.

Are they access the application on the server or through a local replica?

10

Subject: RE: Groups not working in DB’s ACL (Help)

Thanks stephen, yes have checked. PS opening database from server via the admin client. Checking database ACL directly from Admin client. no local copies of the group either. database is accessed via server not local replica.

Any other thoughts let me know and again thanks for the reply.