Mail archiving -- access requirements?

I support a group of executives that has the option to keep mail archives on a server separate from their mail server, and is in a separate domain. Their assistants are the ones who normally perform the archiving, not the execs themselves.

We have seen, on occasion, that the assistants will get the message “You are not authorized to perform that operation.” We have “fixed” this problem by raising the permission of the assistant from Editor (with Delete and Create folders) to Manager on the archive. This is not something we want to continue, as we normally limit user access to Editor, and use group membership instead of explicit name entries.

Does anyone have documented rules for setting up archiving, specifically the minimum access requirements?

Subject: Some info to get you in the right direction

I too have noticed that archiving only works well if the person doing the archiving is 1. manager on both source and target database. 2. Worse, that person must be listed explicitly in both ACLs.

There may be a reason for 1. but 2. is just sloppy programming by IBM (another example of the same problem is in the ownership of resources in the “room & resource reservations”).

What release are you using ? The above is for R5. I think it is changed in ND6 because users can be made editor for their own mailfile and still be able to archive (I have tested this) and to grant others access.