Hi everyone. Back to this forum to get some ideas…
How exactly are the access rights to a response document determined?
Particularly in the situation I have, where the parent document has Readers and Authors fields. It’s for a workflow application, so the Readers and Authors fields have more and more entries as the document progresses along the approval process.
Initially I added some response documents to it, but I had problems making the responses (comments) be seen by everyone who can see the parent document.
So, I added Readers and Authors fields to the response documents. That solved some of the problems, except that comments added before a particular name was added to the parent document Readers/Authors field were not accessible to that person.
I could conceivably create an agent to update all the comments Authors and Readers field everytime a response is saved, but it seems like overkill.
I’m sure I’m missing something simple. Please bonk me on the head. Or better yet, please point me towards the right direction, or to some reference. I’d be more than happy to read. It’s just that Googling this topic has been relatively fruitless.
Subject: Question on Access Rights for Response Docs
I forgot to mention that I was doing a Web app and I would be doing any processing in WebQuerySave. Simple enough, I think. Anyway thanks for the responses! I half-knew it was going to be bloody.
Willy’s pseudo-security suggestion → The response documents are comments anyway, and I don’t think the access needs to be that restrictive. No one can see the comments anyway except by going through the parent document, and clicking on the embedded comments view.
So, to implement this, I’ll have to put a Readers field allowing almost everyone reader access, and an Authors field allowing the creator (and possibly the admin) of the comment to add, edit or delete the response?
Is there anything else I need to do to “lockdown” the application? I suppose users could directly access the Comments view if they knew the name and typed it in the address bar…
I’ll try Stephen’s suggestion too. It doesn’t sound too difficult, right? Thanks a lot!
Subject: Question on Access Rights for Response Docs
Unfortunately your fears are correct. If your parent document is being updated and getting more authors/readers, you will need to set some sort of process or agent to go back and update the readers and authors of earlier response documents, if you want them visible.Probably not what you wanted to hear. Sorry.
