Previous Topic: Disable URL Normailization

Next Topic: Enable a Domino Agent to Collect Credentials for Authentication

Control Access to Lotus Notes Documents

The Web Agent offers a finer level of granularity for protecting Lotus Notes documents on Domino. The folloiwng parameter controls this protection:

Use the DominoLegacyDocumentSupport parameter to configure the Web Agent to process user-requested actions when accessing Notes documents. This offers a finer granularity of protection on Domino.

Notes documents do not have names. They are saved to the database with a reference to the form used to create them. When a user requests a Notes document, the Domino Web Agent finds the form for that document by converting the request into a URL. This URL includes the original Domino action. If no form is found, then nothing is used.

For example:

"http://server.domain.com/db.nsf?OpenDocument"

in the URL To ensure that the Web Agent performs the user-requested Domino action on the document that is specified in the URL, such as ?OpenDocument or ?EditDocument, set the DominoLegacyDocumentSupport parameter to no.

For example, if the URL request is:

http://www.dominoserver.com/names.nsf/934873094893898778578439588098203985798349?EditDocument

The Domino Agent converts the preceding URL to:

http://www.dominoserver.com/names.nsf/Person?EditDocument

where Person is the name of the form used to create the document identified by the NotesID in the original URL.

To force the Domino Web Agent revert back to its pre-4.6 operation for accessing Notes documents, which means that only the action ?ReadForm is permitted, set this parameter to yes. With the legacy document support enabled, the Domino Agent would convert the URL in the previous example to:

http://www.dominoserver.com/names.nsf/Person?ReadForm


Copyright © 2010 CA. All rights reserved. Email CA about this topic