QueryAccess at document level - is this possible?

HCL Domino Domino Forum
1

Hi,

I believe we can find out the access a given user has on a particular database using QueryAccess. But can i do the same at document level. i.e. given a docUNID or a document URL and a user, can i find out if the user has read permission on the particular document?

Any help or pointers will be greatly appreciated. Struggling with this for past 5-6 months :frowning:

-Priya

2

Subject: QueryAccess at document level - is this possible?

You could browse through all Names. Readers, and Authors fields in the document and check their contents.

3

Subject: RE: QueryAccess at document level - is this possible?

It’s easier to do this with the user’s ID. If they try to open the document and have no access, then you can tell they don’t have access to it.

Trying to determine whether a user who is not the current user has access, is more difficult because they might be a member of a group which is a subgroup of a group which is a subgroup of another group which is a member of a role. So you really might have to walk down a hierarchy of groups to make this determination.

4

Subject: RE: QueryAccess at document level - is this possible?

Firstly, i would like to do this programmatically through java. Currently we do get the groups and resolve them - even the nested and cyclic groups. But this is time consuming. Hence we are looking at a more efficient way of doing this.

We have around 100,000 groups and around 1,50,000 users :frowning:

I will just elaborate my query.

I have a notes client on a machine X. and the administrator is always logged into this notes client.

There is a java servlet running on this machine which gets a document url, username and password of a user. Now this servlet is supposed to find out if the given username and password have access to the given document url. Since diiop is not enabled on servers, i create the session using FAT client. i.e.

NotesFactory.createSession(null, null, password); → creates session using credentials of user currently logged into notes client (administrator)

Now using this session, i wish to find if user A has access to a documnet with given docunid. Is that possible?

Any help in this regard will be greatly appreciated.

-Priya