How to use "logic" (AND/OR) with readers field?

HCL Domino Domino Forum
1

In my 7 years of working with Domino, I haven’t come across this need yet, but here it is.

I have readers fields in one of my applications and we’re about to go international, so I need to tweak the security. In this particular case, a person should be able to READ a document IF and ONLY if they have this role AND this other role, but we don’t know this other role until they log in, so it is set upon the time they log in.

Since readers fields contain roles and users, do any of you have some idea of how to be able work this? You can’t use logic operators in readers fields and this has stumped us. I can think of a work around and show all of the docs in a view and then not allow the user to open the doc using a WQO agent. It’s kludgy, but is about the only other thing I’ve thought of at the moment and I haven’t approached the customer with that scenario yet. In the talking phase, ANDing a role sounded great until I got down to the nuts and bolts of it and then I felt like a dummy…

Any help would be appreciated,

Debbie

2

Subject: How to use “logic” (AND/OR) with readers field?

Unless you’re running out of room in the ACL, it would be easier to maintain a “union set” group (members can be assigned programmatically by a scheduled agent) and assign it a third role to grant access to the documents in question…

3

Subject: RE: How to use “logic” (AND/OR) with readers field?

Doing it programatically is the way to go, but not sure with a scheduled agent. People log in all the time to this app and multiple people can be logged in at a time, etc. This would need to be real time and per user or per moment a user logged in.

I know this particular flag and I’ve got a dynamic role created already for that user once they’ve authenticated. Now just need to “AND” them and I kinda got a handle on what you’re saying. My server admin has already left, so I’ll need him to chew on it some also. The only concern I have at this point without knowing if this would work is the scheduled agent as this is a very busy app…

???