I am unable to get @UserRoles to work properly on a local replica?

HCL Domino Domino Forum
1

We have a database which replicates out to a large distributed workforce.

In the ACL of that database, we have a role - “[ABC]”.

Users to whom that role has been allocated see a different interface to other users.

This works perfectly on the Domino server, but fails to take effect on the users’ local replicas.

We have “enforced a consistent ACL across all replicas”.

The only issue I can really think of is the fact that the role has been assigned to a group in the ACL.

The group does not exist in the users’ local NAB databases, but does in the condensed directory catalog.

I have also checked to ensure the directory catalog is referenced in the Notes client preferences.

I am sure that we have distributed other such role-based facilities in this manner, and cannot ascertain exactly why this one wouldn’t work.

Before going around in circles one more time, I was hoping that someone could shed a bit of light on this with a fresh view.

Cheers!

T.

2

Subject: I am unable to get @UserRoles to work properly on a local replica?

Have you assigned an administration server? We have had some fun and games with similar problems to do with roles not being honoured on local replicas and found the admin server setting helped sometimes. THe other thing we tried was to allow doc locking in the db as this forces the lookup for the ACL to go back to the server.

I have also found portals very resistent to change until a restart or the client or a wipe of the cache file or even reloadin gthe db into the portal frame has occurred.

Good luck.

shane

3

Subject: RE: I am unable to get @UserRoles to work properly on a local replica?

Hi Shane.

Thanks very much for the response.

Yes, we have applied an administration server.

I have tried wiping out the cache and desktop - No luck.

I have also tried adding the group to the local NAB database - No luck again.

I am a little hesitant to add the db property to allow document locking, since I am not sure of the immediate consequences.

I seem to remember having similar issues quite some time ago with a user that belonged to several groups. That database (as well as this one) used several different types of entry in the ACL to control access. For example…

*/ABCCorp

John Doe/ABCCorp

Unique Group

I know that one type of entry actually takes precedence over the other (group vs. canonical entry), but I can’t remember which. This particular user is not explicitly named in the ACL, & I really don’t want to clog up the ACL with heaps of individual names.

Perhaps this is the basis of my issue, but I would’ve expected the same issue on the server if this was the case.

The investigation continues…

Cheers!

T.

4

Subject: RE: I am unable to get @UserRoles to work properly on a local replica?

The database must have Enforce Consistent ACL enabled, in order for @UserRoles to work on a local replica.