*** Symptoms:Users who have read access to a document can open it but when they try to open one of its attachments, they receive a “non authorized” message.
-
from native client, the message is “You are not authorized to perform that operation: Could not save file C:\TEMP<local name>”
-
from web client, the message is “Error 200 - HTTP Web Server: Lotus Notes Exception - You are not authorized to perform that operation”
*** More background information
-
people who have access at the database ACL level can open the attachments without any problem.
-
the problem is for people who have no access to the database but only to some documents, via their name in a “Readers” field type.
-
the problem seems to be random, i.e. not in all documents
-
when opening/saving the document, the problem usually disappears (until next time)
*** any idea ?
Subject: Readers can open doc but not its attachments
You say <> which implies the others don’t have access at the ACL level- the default ACL OR at least the people havind trouble, have to be in in the ACL list w/ reader access- the reader field cannot grant a higher level of access then the ACL allows.Tom
Subject: RE: Readers can open doc but not its attachments
Tom,
Thank you for your help.
Sorry if I did not mentioned it in my initial post: “-default-” user has “no access” but has right to read public documents + the documents I am talking about are public.
The point is that the documents can be open by users. It is their attachments that cannot.
Do you have any other idea ?
Kind regards,
Philippe
Subject: RE: Readers can open doc but not its attachments
Hi,
You are saying that when you save those documents, you dont find any problem. What i want to ask is, are those old documents where $PublicAccess field does not exist.
Regards.
Subject: RE: Readers can open doc but not its attachments
Hello Narsimha,
I checked that before making the open/save of the documents. The $PublicAccess field was present with the correct value.
But if it was not there, readers would even not be able to open the document. And actually, the readers were able to open the document. It is when they wanted to open any attachment that they got the error message.
Thank you for your feedback anyway,
Philippe
Subject: RE: Readers can open doc but not its attachments
Is there a controlled access section in the form that perhaps contains the rich text field with the attachment in it?
It would be instructive to take a document that has this problem, and since you say you can fix it by editing the document, compare the value of each field before and after to see what you changed by doing this.
Subject: RE: Readers can open doc but not its attachments
André,
Thank you for your suggestions.
a)
There is no controlled access section in the form.
b)
I shall make the comparaison you suggest next time the problem occurs.
c)
Thinking about this during the WE, I was wondering if a cache somewhere could be the guilty ? Opening/saving the document could force this cache to refresh when the document is newly accessed ? Just an idea, even if it would not explain why readers have access to the document …
Kind regards,
Philippe
Subject: RE: Readers can open doc but not its attachments
The problem re-occured.
So as suggested by André, I compared the values of the fields before and after open/save the document.
Except for the dates and $Revision fields, nothing seems to have changed … but the problem was solved by the mere open/save operation !
Subject: RE: Readers can open doc but not its attachments
Something has changed, but it might have been something subtle, such as the datatype of a field or whether it’s an authors/readers field. Next time, you might try using the compare documents tool that comes with Ives TeamStudio, or export the document in DXL before and after so you can compare those files.
Subject: Readers can open doc but not its attachments
Change the ACL to be READER with Replicate or Copy documents.
I may be the fact that Domino is not allowing the attachment to go into the clipboard before opening.
Subject: RE: Readers can open doc but not its attachments
Nathan,
Thank you for you swift answer.
Unfortunately, the problem is somewhere else :
… “Change the ACL to be READER with Replicate or Copy documents.”
This is already the case.
… “I may be the fact that Domino is not allowing the attachment to go into the clipboard before opening”
People who have read access at the database level can do so.
A mere open/save of the document, without any change often solve the problem.
Nevertheless, thanks for your help.
Kind regards,
Philippe
Subject: Readers can open doc but not its attachments
You wrote: “the problem is for people who have no access to the database but only to some documents, via their name in a “Readers” field type”.
A user can only access documents in a database if the have access to the database (or the document is marked as Public Aceess and the user has the right to read public documents). A Readers-type field determines whether a user who would normally have had access to the document can see the document. If the user has no access to the document due to ACL restrictions, a Readers field CANNOT grant access.
Subject: RE: Readers can open doc but not its attachments
Stan,
Thank you for your answer.
Actually “-default-” user has “no access” but has right to read public documents + the documents I am talking about are public.
Sorry if I did not mentioned it in my initial post.
The point is that readers are able to open and read the documents but not their attachements.
To be honnest, I even didn’t know that a document and its attachments could have different access rights.
Do you have any other idea ?
Kind regards,
Philippe
Subject: RE: Readers can open doc but not its attachments
Are you sure the documents are public documents?
In order for a document to be public it has to be set as such in the form design, and that form MUST have a computed when composed field on it called $PublicAccess equal to “1”
Otherwise, the scenario will play out exactly as Stan wrote. Reader fields only allow document access if the Reader has access to the database. The error you are getting tells me that these are in fact NOT public docs, and the users in question are NOT authorized to see the docs or the attachments.
hth.
brandt
Subject: RE: Readers can open doc but not its attachments
Hello Brandt,
Yes, the form is set as public in its design and the $PublicAccess field is set to “1” in the documents.
The point is that readers CAN open the documents, which would not be the case if something was wrong in the ACL of the database, in the design “public” setting, in the $PublicAccess field, in the reader type field, …
The amazing is that despite they can open and read the document, they cannot open its attachments.
What is also amazing is that on the cases I worked on, I just open/save the document and the problem disappeared.
Thank you for your support,
Philippe
Subject: Readers can open doc but not its attachments
There is no way to give users access to documents, but not to attachments stored in those documents.
Unless the file is not really an attachment and there is some other mechanism to manage them. This line
‘Could not save file C:\TEMP<local name>"’
indicates to me, that the problem is not about access to Domino resources at all. What’s in the properties of the attachment link when viewed from the web?
Subject: RE: Readers can open doc but not its attachments
Hello Harkpabst,
Thank you for confirming that under normal circonstances, a user having access to the document should also be able to display its attachments.
What puzzles me:
*** problem with attachment ?
But then why
-
people who have access rights on the database can open them correctly ?
-
after a simple open/save, people mentioned in the reader type field can also open the attachments
*** access right problem ?
But then why can the document be open at all ?
Thank you for your help.
Have a nice week-end,
Philippe