LO41905: RESTRICT FIELD ACCESS IN XACL, COPY TO PERSONAL ADDRESS BOOK AGE NT TRUNCATES DOCUMENTS

APAR status

• Closed as user error.

Error description

• Setting up xACL to restrict users' access to certain fields in
  the Person form
  in the Domino Directory will cause truncated documents to appear
  in the
  Personal Address book when the "Copy to Personal Address Book"
  agent is used.
  
  I reproduced the problem and found the problem is caused by
  Extended ACL
  settings.  I used the following steps to reproduce the problem:
  
  
  
  1) Set extended ACL in domino directory
  
  2) in Extended ACL, chose my test domain */Domain
  3) in Access list, chose my test user - user/Domain
  
  4) Form and Field access, chose Person - this is the form used
  by the
  "send to personal address book" agent to copy fields to the same
  form in
  the pernames.
  
  5) In the fields section, chose deny read/write to several
  fields,
  including CompanyName, MailSystem and other fields that are
  common with the
  contact document
  in the pernames.
  
  6) save and close the xACL
  
  7) Log into Notes as the test user - user/acme
  
  8) Open domino directory, select some person documents, choose
  "copy to
  personal address book"
  
  9) the agent runs without error
  
  10) Open the personal address book, some or all of the newly
  copied
  person documents will be truncated, you cannot edit them, and
  the tab
  indicates the document is truncated.
  
  
  "Copy to personal address book" is an agent in Public address
  book. It
  copies entire Person document to local address book:
  
  
  
    Set destnote= sourcenote.CopyToDatabase(destdb)
  
  
  
  If a user is denied access to some common fields in both forms,
  such as
  MailSystem, the copied document will be "Truncated", and cannot
  be
  edited.
  

Local fix

• Modify the Copy to Personal Address book agent so that it will
  copy only
  the fields that you specified in the xACL that the users can
  read.
  

Problem summary

Problem conclusion

Temporary fix

Comments

• This APAR is associated with SPR# WTON6XYJXT.
  Per development: From the Admin Help entitled "Extended ACL
   access settings":  If you deny a Notes or Web user access to a
   field in a document, when the user opens the document, the
   document does not show the field and the text (TRUNCATED)
   shows in the tab of the document. In addition, the user is
   unable to edit the document, even if the user has write access
   to the fields in it.     Thus, if the user opens a contact on
   the server Address book which has a restricted field the user
   does not have access to, the document will show the
   (TRUNCATED) text in the tab.  Also, if the user then copies
   that contact to their Personal Address book they will still
   not have access to the fields which have been restricted.
   Thus, the text (TRUNCATED) will still show on the document in
   the Personal Address book.  This is working as designed.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels