Security hierarchy with controlled-access sections

HCL Domino Domino Forum
1

I’m trying to implement an employee evaluation application. I have to be able to allow the employee to click a button to electronically sign-off the document, but NOT be able to edit the evaluation fields themselves.

I currently have the eval questions in tables nested in a controlled-access section. The section editor settings are:

[admin] : AdditionalEditors : Creator

AdditionalEditors and Creator are both computed fields that do NOT include the employee’s name (EmpName field). The employee is given author access to the form via an Authors field.

My problem is that the employee is able to edit the controlled-access section, even though his name isn’t listed as an editor. I need to know what the security hierarchy is in this case. Is the “author” access overriding the security on the section? If so, how do I keep the employee from editing the section OR only editing the signature field (via button)?

Any help would be most appreciated.

2

Subject: Security hierarchy with controlled-access sections

In my experience, having author access to the form design overrides other restrictions. Assuming the user’s approving the document using the client and not a browser, have you considered making the sections they review and approve as computed for display? Another possibility would be to display the document using another form design that would only display the desired data and not allow editing? Just a couple of thoughts for you. Hope this helps and look forward to your reply.Regards,

Jan Peters