I have a bit of a problem here with the ACL on mail files, let me explain.
I have written an agent that is manually triggered from a form.
This agent creates calendar entries in a user’s mail file.
The functionality for deleting these entries is in place and works but we’ve encountered a problem.
In order to create and delete these entries, we have to give a higher level of access to all users that will use the database.
With me so far?!?
My question is, can I call the agent but access the mail database using another user’s ID? (that’s what I thought the run on behalf of was for).
If not I may have to rewrite the way in which this works…we don’t like that!
Subject: Manual Agent as another user
Here’s my first thought:
If users have the right to run an agent
and the agent is signed by someone with
a role such as [Admin] then the updates
could be identified by that person/role.
You don’t necessarily need another’s ID
to make use of the person’s Identity.
Collin
Subject: RE: Manual Agent as another user
Cheers for getting back so quickly Collin.
I’ve tried that. The problem is that the agent is called from an action so it is run by the user who clicks the button basically.
Just BTW the functionality will only be used by one person in our client company who has access to everyone’s mail anyway, so problem solved for them.
I’ll post a solution if I ever find one!
Subject: Manual Agent as another user
The solution is in the Agent FAQ. There is a table there in the security section which tells you what permutations are possible. What you trying to do can be done only one way using RunOnServer. I always contact Agent FAQ first, saves me hours of time experimenting. If you you don’t have it bookmarked, it is under resources on the right