Roles, Profiles and Document Restriction

HCL Domino Domino Forum
1

Hello All,

In my application, I have developed three different profiles: GlobalAdmin, SiteAdmin, and DeptAdmin. I have also created these items as roles in the ACL.

GlobalAdmins can see all; SiteAdmins only see documents registered with their site profile; DeptAdmins only there department information based on the site.

I have only setup the roles and the profiles. The global functionality works and the site as well.

Now, I want to assure that when a deptadmin goes to a particular view, that he/she sees only the documents that pertain to their department. Although I know what I want, I do not know how to get there (whether I should use “Postopen”, etc.) and what exactly the code should be.

Can anyone lead the way to where I can find how to do that?

Thanks in Advance :o)

2

Subject: Roles, Profiles and Document Restriction

Have you looked into Readers and Authors fields?

3

Subject: RE: Roles, Profiles and Document Restriction

Hi Suan,

Yes, I am aware of those fields. This issue is what would be the code to do this. Or, at least, where do I begin with the code (Notes programming and/or lotusscript)…

Let me Know :o)

4

Subject: RE: Roles, Profiles and Document Restriction

You would have an ACL group for each of the roles, and given that role in the ACL.Put the users that belong to that role into the ACL group.

In your documents, you would have a Readers field with the role name - e.g. [GlobalAdmin]

Now you mentioned Profiles. If you are trying to do this dynamically in the database, by putting peoples name in these profiles, that won’t work. You cannot give users roles unless they are set up directly in the ACL.

5

Subject: RE: Roles, Profiles and Document Restriction

… And your Reader field will need to be computed and will need to look at some value on the document to determine what dept/region/etc. it belongs to, and therefore which [role] should be in the Reader field.

regards,

raphael