Howdy to the kind folks who contribute here.
In our R6.0.2CF2 environment, please consider the “Programmability Restrictions” section of the Server Documement in the Domino Directory. There, you’ll find a field with the description “Run unrestricted methods and operations”.
Is there a nice list of those methods and operations that are considered unrestricted? I didn’t see such a list in Julie Kadashevich’s “Agent FAQ” (which I found, by the way, at http://www-10.lotus.com/ldd/46dom.nsf/7e6c7e584a76331b85256a46006f083e/574c99ccb345839185256976004e811e?OpenDocument ).
For my specific need at this time, a developer is asking me (an administrator) what rights are required for his “After new mail arrives” agent to detach files from a mail database and save them on another (win2000) server’s file system. I suspect that the signer of the agent will require (either via “on behalf” of, or directly) clearance for unsrestricted methods and operations, PLUS I may have to adjust on my Domino server what rights the Domino service has (eg make it run as a specific user instead of as the system).
Any comments on either my more general question regarding a list of unrestricted methods/operations, or on my specific need now will be most appreciated.
-Steve
Subject: What methods and operations are considered unrestricted?
Have you read the administrators help file about this topic?
Also, have you seen this article?
http://www-10.lotus.com/ldd/today.nsf/lookup/ND6NewAgentFeatures
Subject: RE: What methods and operations are considered unrestricted?
Yes, it’s a very helpful document, as are many of Julie’s contributions. In this particular instance, I didn’t see the info I was looking for, but I still printed it for reference down the road.
Subject: What methods and operations are considered unrestricted?
The list is right there in the Designer Help. Search for “Restricted LotusScript and Java agent operations.”
Subject: RE: What methods and operations are considered unrestricted?
Thanks for the pointer. I had seen that doc, in fact, but I wasn’t sure whether there were any operations that formula language has in its repertoire that would require clearance.
For example, I read in the designer help that
@Command([EditDetach];…)
requires clearance in the workstation ECL, but that statement applies to agents that are invoked by the client. If that command is invoked by the server, but via an agent that is signed by a user, doesn’t the clearance provided for that user determine whether whether the operation will be allowed?
I’m getting particular about this because I’m trying to avoid both a) granting unrestricted server access for users and b) having to sign all such agents with an ID that has clearance.
Thanks again -Steve
Subject: RE: What methods and operations are considered unrestricted?
The formula language is a different kettle of bouillabaisse. Restricted vs. unrestricted is a distinction that applies only to LotusScript and Java. I’m not sure how or even if an agent with @command([EditDetach]) would work in a background agent on a server, but that particular server setting isn’t one that comes into play.
Subject: RE: What methods and operations are considered unrestricted?
There are no unrestricted operations for formula language. The Designer help which has a list of unrestricted methods (mentioned in this thread) has the complete list of unrestricted operations.
@Command([Detach]) doesn’t run in the background on the server and so there is no security exposure.
Subject: RE: What methods and operations are considered unrestricted?
Thanks to all.And, (lots of my time) saved by Julie again, even without ever meeting her!