A have a replica of a nsf on my Notes WS created from Domino srv. But every one can access this nsf localy. I don’t want to encript this nsf localy. I want to use localy ACL rights as I use them when this nsf is on Domino srv. Could you tell me does it is possible and how?
Thanks in advance.
Subject: why ACL on Notes doesn’t work
Stephan,
in the ACL on advanced tab, tick “Enforce a consistant Access control list across all replicas”.
Search this forum for disatvantages of this setting.
Regards
Bill
Subject: RE: why ACL on Notes doesn’t work
Thank you Bill. A checked this option and now I’m happy. But I have onother problem related to this. I have a goup in my ACL defined on Domino srv. Members of this group are also defined on this Server. But on local replica on Notes, members of this group have not access after I checked “Enforce a consistent ACL across all replicas” option on local ACL. Have you an Idea? Thanks for your help.
Subject: RE: why ACL on Notes doesn’t work
When a user takes a local replica of a server database, the replication process creates a hidden ACL entry for that user ID in the replica that has the same access level as they would have had on the server copy.
I think that’s refreshed each time replication is done.
So a local replica really only belongs to one person, and cannot be shared between users, unless they are explicitly in the ACL by name.
There’s no Group Security in local machines, so this is the only way to ensure database access cannot be bypassed.
Subject: RE: why ACL on Notes doesn’t work
Just want to confirm the following. I have read access in ACL on server database, if i make a replica of the database on my local machine, do I have the same rights on the local copy (read only) or can i modify the ACL associated with it.
Kindly forgive me for my very basic query.
Regards,
Tabassum
Subject: RE: why ACL on Notes doesn’t work
If the Enforces ACL… option is selected on the server version, then yes - you will only have Reader access.
However, that is not trully secure unless the local replica is also encrypted - otherwise a hex editor can be used to hack the ACL.