How do i create a password protected notes-DB?

HCL Domino Domino Forum
1

Hello

Im looking for a way to create a password protected notes-Database.

In the ACL i want to set access to everyone in the notes domain.

On opening the Database the user gets a popup where he has to enter a Password to gain access.

I guess the password will be predefined in a encrypted Field inside the Database or somethging like that.

The idea behind this, is so an office can just give out the password to the database without having to notify an Admin to change the acl.

Anyone an idea?

thanks

kind regards

Tibor

2

Subject: Password protected notes-Database

Well, you could put your code into the “PostOpen” event of the Other/Database Resources/Database Script library.(some @Prompt([OKCANCELEDIT]) stuff that checks for user password and logs the user out if it’s wrong).

But this won’t be a “real” security feature anyway.

Thierry Cayla

http://dominoeffects.serveblog.net

3

Subject: How do i create a password protected notes-DB?

With all of the great security built into Notes why don’t you just set up the appropriate groups in the ACL. This will only have to be done once and then the group owners can make all of the changes they want without relying on an administrator.

Seems like you are trying to re-invent the wheel and I doubt you will come up with anything as good as what is already built in.

4

Subject: Password protection

You will need to shape the ACL initially and that can’t be helped but if you shape it well you won’t need to revisit it. Firstly add an ACL entry called Anonymous and set their access level to ‘No Access’. This will ensure that anyone who needs access to the database will need to be authenticated (ie, login in with password) through the Domino Directory. Then add ACL entries for either individuals or Groups and set their access levels and roles as you would like them. Ensure that someone or some group always has Manager level access so that the ACL can be modified.

The login screen will be delivered by the server so it won’t be a pop up however you can change that. This advice is based on web access to a database through a browser. If you mean access to the db from a Notes Client then set Default to ‘No Access’ in the ACL. Add groups or individuals to the ACL with appropriate levels and roles.