I’m having problems with an Authors field. Within my Database, all users have the right Editor in ACL.
The problem is that only require that users in the field Authors altered a document, but all users can modify documents.
thanks.
Tengo una base datos, donde los Usuarios incluidos dentro del ACL possen permiso de Editors, y dentro de un formulario requiero que solo los usuarios incluidos dentro del un Field Authors puedar modificar este documento, sin embargo el campo Author no esta siendo validado, y todos los usuarios tienen permiso de modificar dicho formulario.
This was the case in older versions of Notes. But nowadays you have to be editor or there has to be an author field.
Author:
Create documents if the user or server also has the Create documents access level privilege. When you assign Author access to a user or server, you must also specify the Create documents access level privilege.
Edit the documents where there is an Authors field in the document and the user is specified in the Authors field.
Read all documents unless there is a Readers field in the form. If there is a Readers field, the Author must be listed to be able to read documents.
Be aware that using the Query events or any form based means of preventing the wong people to access the document is not a secure solution. The only real security is by the use of the correct acl settings and readers and/or authors fields. Everything that is based on code in a form can be bypassed by changing the document with an agent or other means that doesn’t use the form.
I’m having problems with an Authors field. Within my Database, all users have the right Editor in ACL.
The problem is that only require that users in the field Authors altered a document, but all users can modify documents.
Editor Access IGNORES an Author Field.
When you add an author field, you’re expanding who can Edit the document NOT restricting who can edit a document. (Not like Readers fields - which is probably why people get confused.)
By Default - the author is normally - the person who created the doucment.
If you create an author field you can add people who can edit the document. E.g. I want to give access to you and me, then I would put your name and my name in the Authors field.
However, if we have Editor access and see the document - then we can edit the document no matter who is in the Authors field.
What you want to do is LOWER people’s access from Editors Access to Author Access and then add to your authors field only the people you want to be able to edit.