Suddenly Users can't edit own entry in Main Address Book

HCL Domino Domino Forum
1

Hello,

I must have done something, but not sure what to the ACL of the primary Address Book of our Domino Server.

For some reason now our users cannot edit their own entry in the Address Book to change their internet password.

Can anyone point me in the direction of what’s wrong?

Thanks,

Chris

2

Subject: Suddenly Users can’t edit own entry in Main Address Book

The users have to be listed as the owner of their own person doc, in order to be able to edit it.

Also, check your domain Security Settings document. There is a field “allow users to change their internet password via HTTP”. This field must be set to “yes”

If it’s an ACL change, the log should have info on what was changed. But if a user is listed as an owner of their person doc, and they are allowed to change internet password, they should only need Reader access to the Domino Directory.

3

Subject: RE: Suddenly Users can’t edit own entry in Main Address Book

and, maybe one of these days, I’ll learn to not hit Post, while talking on the phone, before I double check what I typed!

4

Subject: RE: Suddenly Users can’t edit own entry in Main Address Book

Thanks for the quick helpful answers.

Yes I checked each user is still the owner of their document, so that’s fine.

In the ACL, default was set to reader, but Anonymous was set to No Access. I have changed this back to Reader and we’ll see if that works. The log does show I changed Anonymous access a month ago.

Thanks,

Chris

5

Subject: RE: Suddenly Users can’t edit own entry in Main Address Book

OK, it did seem to be Author access was the key, and not Reader.

Also, I know I’ve seen “allow users to change their internet password via HTTP” , but I can’t find the security settings page you refer to. I’d like to doublecheck that setting.

Thanks,

Chris

6

Subject: RE: Suddenly Users can’t edit own entry in Main Address Book

This is created via a Policy document, set one up for Security Settings and the option will be there.

Also, make sure you force people to authenticate before giving them Author access - that way the server will know who they are.

7

Subject: ACL should be Author

The ACL for users should typically be author. They don’t need any special properties or roles. Check the ACL log to see if it has been changed lately. They should be able to edit their own Person doc because it should have each user’s name in the Owner field.