Eliminate execution security alerts

View expert feedback to this tip.

Execution Security Alerts (ESAs) occur when a user has not authorized an action for a particular signature in their Execution Control List (ECL). This was supposed to be a security feature, causing users to pause and consider if a certain signature should have access to take a certain action, and then clicking "trust signer" for that action. Unfortunately, it can become a support nightmare when a new signature is introduced, such as when a new server, developer or third-party application is deployed.

Lotus provided a way to push an initial ECL to clients via the administration ECL (admin client, people and groups, actions menu, edit administration ECL). This works great for installs, but when a new signature is deployed, existing clients aren't updated.

Code

To update existing client ECLs, provide the following code. You can put it in a button which is emailed to users, store it in

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Spam and Security Securely connect Lotus Domino servers on different domains Protect Lotus Notes from malicious code with the Domino ECL How to correct Lotus Notes public key mismatches in four easy steps A recipe for secure IM success Telecommuter security kit Spear phishing: Don't be a target FAQ: Lotus Notes Domino password issues Security awareness training: How to educate employees about spyware Seven tips to strengthen your Domino e-mail security Admin2005 preview: Tips, techniques, and a look at Notes/Domino Rel. 7 Lotus Notes Domino Access, Permissions and Authentication Display Lotus Notes user group membership details in a tree view How DirLint verifies data in Lotus Notes Domino 8 directories Fix and update Lotus Notes documents with limited access Lotus Notes access error: 'database is not opened yet' Formula language button manages Deny Access list searches Update the ACL from the Roles view with LotusScript Secure Lotus Notes 8 with the Internet password lockout feature Find a Lotus Notes user within NAB Deny Access groups Move a Lotus Domino server to a new certifier without a reinstall Troubleshoot Lotus Notes Out of Office (OOO) agent error messages

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

a database, or (our choice) place it in the postopen of the database script in the mail template.

*The code below assumes a local replica of the PAB with filename "srvnames.nsf" for remote users. Replace with the filename you use, or with "" to take no action when on local.*

EXPERT FEEDBACK TO THIS TIP

This tip talks about remote users, but does not mention server-based users. The @RefreshECL function can take parameters for server and file name. The example in this tip is for local users, but remote users in R5 and D6 don't usually have complete replicas of the Domino Directory. They have lightweight versions called Directory Catalogs, which don't contain the admin ECL. So it would be better to have one button sending everyone to the server version of the admin ECL, and simply tell your remote users to be connected to the network when they press the button.

Do you have comments of your own? Let us know.