HCL
Skip to main content  
 
   


SPRTechnote


Users Can Modify ECL Even Though Administration ECL is Set to NOT "Allow User to Modify"

Technote Number: 1089782


Problem:
This issue was reported to Lotus Quality Engineering and has been addressed in
Notes 5.0.7 and 6.0-.

Excerpt from the Lotus Notes and Domino Release 5.0.7 fix list (available at
http://www.notes.net):

Security - Workstation (ECL - Local security)
SPR# RSCR4SWNYZ - Fixed a problem introduced in R5.0.5 where workstation ECL
settings could be incorrectly refreshed from the Administration ECL when the
user clicked the Refresh button on the Workstation Security Options dialog box.

This issue does not occur in versions of Notes prior to version 5.0.5.

Supporting Information:

The following steps reproduce this issue:

1. As an Administrator, open the Domino Directory from a Notes client.
2. Select Actions, Edit Administration ECL.
3. Setup ECL and disable the "Allow User to Modify" option and click OK to
confirm.
4. Register a new user.
5. Install Notes client and setup client for that new user.
6. Start Notes client.
7. Select File, Preferences, User Preferences...
8. Click button 'Security Options..." to enter ECL settings for Workstation
security. You notice, that the ECL settings as well as the buttons "Add",
"Rename" and "Remove" are all greyed out.
9. Select a signature other then "-Default-" or "-No Signature-" and select the
button 'Refresh'. Notice that the buttons "Rename" and "Remove" are now active
and can be used to rename or remove entries in the ECL. ECL settings are still
greyed out.
10. Select Java applet security and select Refresh again.

Now, even the ECL settings have become active and can be modified. The same is
also true for the JavaScript security ECL settings.
More >





  Document options
Print this document
Print view

  Search
Search Advanced Search


  Fix list views

 RSS feeds   RSS
Subscribe to the fix list

  Resources
Using this database
View notices

  HCL Support
HCL Support


    About HCL Privacy Contact