Restricting access from client only

How can I grant reader access to web users, but at the same time limit who has reader access from the Notes Client?I want all users (authenticated and unauhtenticated) to be able to access the content, but I only want some of the authenticated users to be able to access it from the client (to avoid people creating local replicas and running of with the database).

Subject: Restricting access from client only

one solution would be to open a designated page when the database is opened in the client (database properties)and put in the “PostOpen” event of this page something like

var = Evaluate( | @IsMember(@UserRoles ; "[External]" ) | )

If var(0) Then source.Close

(with an optionnal messagebox)

and then you manage in the ACL who has which role

alternatively, you could put this code in the database script

Subject: RE: Restricting access from client only

Simple solution is to have two forms, one for the web and one for the client. Each form can have their own access rights assigned to. This way you can keep ur ACL the same for the DB but have a special permission for the form itself.

Subject: Restricting access from client only

Add “Anonymous” to the ACL and give it reader rights.Now anyone can access the database from the web.

Set -Default- to No access. Now no one can access the database from the client.

Add the groups that are allowed to access the database to the ACL and give them the appropriate rights. The people in the groups will have the access they are granted.

Regards,

René

Subject: RE: Restricting access from client only

This doesn’t really solved the problem. I want all autheticated users to be able to access the content from web, but some of them should not be able to access it from the Notes client. Adding “Anonymous” only allows users to log in if they are not authenticated.Consider user A and B. B should be allowed to use the database from the Notes client, and A should not. However both should be allowed to access the database from the web. If I add “Anonymous” both users are allowed to do that, but once they authenticate with the web server, A will no longer have access. But I want A to have access from the web even though he/she is logged in.

Subject: RE: Restricting access from client only

I don’t think that you can split the rights for someone who is logged in for Notes and the web.

What you can look at is a readerfield.

Put the group(s) that are allowed to look at the database in the client in this group (or, as I prefer, put this group(s) in a role and put this role in the readerfield).

Put also $$WebClient in the readerfield.

Everybody who access the database by the web can see the docs and in the client only those who have the role can see the docs.

Readerfield can slow down performance though, so I don’t know if this is the solution you’re looking for…