Set Form Access: Groups
As was mentioned earlier in this chapter, groups can be used to grant or deny access to Domino data and can ease the administrative burden substantially. This section covers using groups to secure various Domino elements: namely fields, forms, views, and sections.
By default, any user with Author access and the Create Documents privilege can create new documents and read existing documents (barring the use of a Readers field). However, Domino forms support Form Compose and Form Read Access lists, which can refine the ACL and further secure specific forms. Form Compose and Form Read Access lists specify users, servers, roles, and groups that can create new documents with the form and that can read documents with the form. Groups and roles provide an easily maintainable mechanism for restricting access through forms. To use a group or role to restrict who can read documents with a particular form, follow these steps:
1. | In the Designer client, open the database containing the form. |
2. | Open the form you want to secure. |
3. | Choose Design, Form Properties from the menu, which opens the Form properties dialog box. |
4. | Click the Security tab (looks like a key). |
5. | Deselect All Readers and Above in the Default Read Access for Documents Created with This Form. |
6. | Select the group(s) and/or role(s) that should be assigned Read access from the existing list (derived from the ACL) or click the Add Read Access button to select groups from the Domino Directory. |
7. | Close the Form properties box. |
To use a group and/or role to restrict who can compose documents with a particular form, follow these steps:
1. | In the Designer client, open the database containing the form. |
2. | Open the form you want to secure. |
3. | Choose Design, Form Properties from the menu, which opens the Form properties dialog box. |
4. | Click the Security tab (looks like a key). |
5. | Deselect All Authors and Above in the Who Can Create Documents with This Form section. |
6. | Select the group(s) and/or role(s) that should be assigned Read access from the existing list (derived from the ACL) or click the Add Create Access button to select groups from the Domino Directory. |
7. | Close the Form properties box. |