How is the user listed in the ACL?

HCL Notes/Domino 8.5 Forum (includes Notes Traveler)

Subject:

There are two possibilities: the user session is somehow losing it's authentication, and therefore is attempting to run the agent anonymously, until something seemingly magically re-establishes authentication; or the user is somehow losing authorization rights that should be granted in the ACL, and then something seemingly magically is restoring those rights. If I had to guess, it's probably the latter, but I think there's not quite enough info here to say.

What is the -default- setting in the ACL, and what is the -anonymous- setting? And what is the exact error message that they get back (and/or is printed to the Domino console) when they attempt and fail to run the agent?

And BTW: how exactly do they attempt to run the agent? Are they sending an ?OpenAgent URL? Or is this a webQueryOpen or webQuerySave agent?

Also of interest: does this happen to users who are explicitly listed in the ACL? Or does it happen to users who are members of a group that is listed in the ACL? I suspect it's probably the latter, and I suspect that it's probably an authorization issue rather than authentication issue, and I suspect that you may be having some weirdness in group expansion in your server's Domino Directory... but like I said above, there's not enough to go on here yet.

-rich

Feedback response number WEBB98HSFP created by ~Ned Nimfanakonyoopsi on 06/09/2013