Managing database ACLs from a browser (Page 6)

Search DominoPower's 11,433 Lotus-related article archive

Home
EasyPrint
News details

Articles-only

Twitter Feed

Managing database ACLs from a browser (continued)

As is the DelACLRole agent:


Sub Initialize

	Dim session As New notessession

	Dim db As notesdatabase

	Dim doc As notesdocument

	Dim acl As NotesACL

	Dim acle As NotesACLEntry

	Set db = session.CurrentDatabase

	Set doc = session.DocumentContext

	Set acl = db.ACL



	REM get the value of the role to delete

	nRole = doc.GetItemValue("newRole")(0)



	Call acl.deleterole(nRole)

	Call acl.Save



	REM Redirect user's browser

	wpath = doc.getitemvalue("dbpath")(0)

	Print "["+wpath+"ACL?Open]"

End Sub

The "DelACLUsr" agent is used to remove users from the ACL. It's very similar to the previous two agents. Its code follows:


Sub Initialize



	Dim session As New notessession

	Dim db As notesdatabase

	Dim doc As notesdocument

	Dim acl As NotesACL

	Dim acle As NotesACLEntry

	Set db = session.CurrentDatabase

	Set doc = session.DocumentContext

	Set acl = db.ACL



	REM get the name of the user that was selected to be deleted

	dUsr = doc.GetItemValue("Users")(0)

	REM get the ACL entry corresponding to that user

	Set acle = acl.GetEntry(dUsr)

	Call acle.Remove()

	Call acl.Save



	REM redirect users browser

	wpath = doc.getitemvalue("dbpath")(0)

	Print "["+wpath+"ACL?Open]"

End Sub

The "Inetlvl" agent sets the maximum Internet access level for the database ACL based on the value selected on the ACL form. The code for this agent is:


Sub Initialize

	Dim session As New notessession

	Dim db As notesdatabase

	Dim doc As notesdocument

	Dim acl As NotesACL

	Dim acle As NotesACLEntry

	Set db = session.CurrentDatabase

	Set doc = session.DocumentContext

	Set acl = db.ACL



	REM get the maximum internet access value from the form

	lvl = doc.GetItemValue("mxInet")(0)

	REM set the value on the ACL

	acl.InternetLevel=lvl

	Call acl.Save

End Sub

Save all the agents and open the ACL form in your browser. If you've set the maximum Internet access for the database to Manager, then you should be able to manage all the ACL entries from the form.

This system can be used in any Web-accessible Domino application and is an excellent way of providing your Web users with added control over your applications.

Daniel Koffler is a Contributing Editor to DominoPower. Daniel is a R6 CLP and works as an IT consultant for major organizations in North America and Europe, specializing in network design, security analysis and knowledge management, he is also the author of several OpenSource projects. Daniel can be reached at dkoffler@users.sourceforge.net.