Notes/Domino Fix List
 |  |
| SPR # MKAE5LDD4S | Fixed in 6.0.4 release | Template fix: iNotes6.ntf
Security fix |
Product Area: IBM Lotus iNotes Technical Area: Mail Platform: Windows
SPR# MKAE5LDD4S - Fixed a problem where the 'Mail file owner' could be changed if the user had Editor Access in the ACL of their mail file.
Technote Number: 1107708
Problem:
This issue was reported to Lotus Software Quality Engineering, and was fixed in
Domino Web Access (DWA) 6.5.1.
Caveat: This issue is resolved in DWA 6.5.1 ONLY with the use of a Notes.ini
parameter: iNotes_WA_RestrictOwner=1
If the parameter is not used, then the issue still occurs.
Excerpt from the Lotus Notes and Domino Release 6.5.1 MR fix list (available at
http://www.ibm.com/developerworks/lotus/):
Mail
SPR# MKAE5LDD4S - Fixed a problem where the 'Mail file owner' could be changed
if the user had Editor Access in the ACL of their mail file.
Steps to Reproduce Problem:
1. Register a user (iNotes) and select the iNotes template, "iNotes Web Access
(R6)". Set the Mail file owner access to 'Editor'.
2. Open the Notes Client with the iNotes user ID, and open the mail file
(select File, Database, Open and select the mail server, then select the user's
iNotes mail file).
3. Select Actions, Tools, Preferences. Switch to the Mail tab, then switch to
the Basics sub tab.
4. Note that the name currently in the field, "This Mail File Belongs To" is
this iNotes user's name. Note also you are not able to change this field. The
Change button does not display and you cannot change the name by typing another
name directly into the field.
5. Open a web browser and open the same iNotes mail file.
6. Select the Preferences button.
7. On the Mail tab, the 'Mail File Owner' field is set to the iNotes user
name. However, note also that you can actually change the value in the field
by typing in another name, More >
Last Modified on 03/04/2010
Go back
|